Privacy Policy

1. Introduction

DTS Analytics LLC ("DTS Analytics", "Company", "we", "us", "our") operates the Vantafin platform, including the website and all related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Service.

By accessing or using Vantafin, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

This Privacy Policy does not apply to data that our users may independently collect or process using the Service ("User Content"). Any questions about User Content should be directed to the respective user.

2. Information We Collect

a. Information You Provide

• Account information: When you register or sign in, we collect your name, email address, and password (stored in hashed form). If you sign in via Google or Microsoft OAuth, we receive your name, email address, and a profile identifier from the provider you choose.
• Profile and preferences: We store settings you configure in the Service, such as display theme and account profile details.
• Payment information: If you subscribe to a paid plan, payment details are collected and processed by our third-party payment processor (Stripe). We receive billing-related metadata (such as customer and subscription identifiers, plan type, and payment status) but do not store full credit card numbers on our servers.
• User content: We collect and store content you create or upload through the Service, including chat conversations and messages, saved prompts and projects, watchlists, saved screeners, alert configurations, and files uploaded to your personal file drive (including filenames, folder structure, file metadata, and stored file contents).
• API keys: If you generate a Vantafin Data API key, we store a hashed representation of the key, its label, creation and last-used timestamps, and associated usage logs.
• Newsletter: If you subscribe to the Vega newsletter (including through marketing pages without creating a Vantafin account), we collect your email address and the source of the signup.
• Communications: If you contact us for support, request account deletion, or provide feedback, we collect the content of those communications along with your email address.

b. Information Collected Automatically

• Usage data: We collect information about how you interact with the Service, including pages visited, features used, search queries, API and WebSocket requests (where applicable), timestamps, referring URLs, and session duration.
• Device and network data: We may collect your IP address, browser type and version, operating system, device identifiers, screen resolution, and Internet service provider.
• Cookies and similar technologies: We use cookies and similar technologies for authentication, preferences, analytics, and security. See Section 4 below for more information.
• Anonymous browsing: If you use portions of the Service without signing in, we may still collect limited usage, device, and cookie data as described above to operate, secure, and improve the Service.

c. AI Interaction Data

When you use AI-powered features, we collect the prompts, queries, attachments, tool invocations, and other content you submit ("AI Inputs") and the responses generated ("AI Outputs"). This data is used to provide the Service, maintain conversation history, power document search over files you upload, detect abuse, and improve the quality and safety of our AI features. Certain alert notifications may include AI-generated summaries of filings or news items tied to your alert configuration.

d. Financial and Market Data

Vantafin allows you to create watchlists, saved screeners, alerts, and research artifacts and to interact with financial and market data. We collect and store such configuration and usage data to provide the Service. We do not collect brokerage account credentials, portfolio holdings, or trading account information unless explicitly stated in a specific feature.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and operate the Service: Account management, authentication, feature delivery, watchlists, screeners, alerts, file storage, programmatic API and WebSocket access, and customer support.
• Process payments: Billing, invoicing, and subscription management through our payment processor.
• Deliver notifications: Sending transactional emails (account verification, password resets, billing, alert notifications, account deletion confirmations) and, with your consent, marketing or newsletter communications.
• Improve the Service: Analytics, debugging, performance monitoring, product development, and user experience research.
• AI features: Processing AI Inputs to generate AI Outputs; indexing uploaded documents for search and retrieval; generating conversation titles and alert summaries; safety and abuse filtering; and improving AI quality. We do not use your AI Inputs to train third-party foundation models. We may use aggregated or de-identified interaction data to improve our own systems and safeguards.
• Security and fraud prevention: Detecting and preventing unauthorized access, abuse, fraud, and other harmful activities.
• Legal compliance: Complying with applicable laws, regulations, legal processes, or governmental requests.

4. Cookies and Tracking Technologies

We use the following categories of cookies and similar technologies:

• Strictly necessary: Required for authentication, security, and core functionality. These include session cookies (such as vantafin-session) used to keep you signed in. These cannot be disabled without breaking core features.
• Preferences: Store your settings and preferences (such as vantafin-theme for light/dark mode and cached profile display data).
• Analytics: Help us understand how users interact with the Service so we can improve it. We use third-party analytics tools such as PostHog and Google Analytics, which may set their own cookies or similar identifiers.

We may also use local storage in your browser for performance, caching, and preference sync. You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of the Service.

5. How We Share Your Information

We may share your information with the following categories of third parties:

• Service providers: Hosting and cloud infrastructure (including object storage for user files and cached content), payment processing (Stripe), email delivery (Resend), analytics (PostHog, Google Analytics), customer support, and security vendors that help us operate the Service. These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.
• AI infrastructure providers: Your AI Inputs (and, where necessary, excerpts of uploaded documents or retrieved filing content) may be transmitted to third-party large language model and embedding providers to generate responses, titles, alert summaries, and document-search results. We require these providers to maintain appropriate data protection standards and do not authorize them to use your content to train their public foundation models.
• Market data and content providers: When you request quotes, filings, news, or other datasets, your query may be logged by us and may involve retrieval from third-party data sources. We do not share your personal account information with those providers except as necessary to fulfill the request or comply with their licensing terms.
• Identity providers: If you choose Google or Microsoft sign-in, authentication is handled by the provider you select under its own privacy policy.
• Legal and safety: We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect rights, safety, or property.
• Business transfers: In connection with a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of the transaction.

We do not sell your personal information. We do not share your personal information with third parties for their own direct marketing purposes.

6. International Data Transfers

Your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to these countries.

Where required by applicable law (e.g., for transfers from the European Economic Area, United Kingdom, or Switzerland), we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms to protect your personal data.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for a limited period as necessary to:

• Comply with legal obligations (e.g., tax, accounting, or regulatory requirements)
• Resolve disputes and enforce our agreements
• Prevent fraud and abuse
• Maintain security and backup integrity
• Honor billing, webhook, and payment-processor record-keeping requirements

Chat history, uploaded files, watchlists, screeners, and alert configurations are generally deleted or disassociated when you delete your account, subject to the exceptions above. AI interaction history is retained while your account is active and may be deleted upon account deletion or request where applicable. API usage logs may be retained for security, billing, and rate-limiting purposes. Newsletter email addresses are retained until you unsubscribe or request deletion. Aggregated or de-identified data that cannot reasonably be used to identify you may be retained indefinitely.

8. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), access controls, and secure credential storage. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request confirmation of whether we process your personal data and obtain a copy of it.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
• Restriction / Objection: Request restriction of, or object to, certain processing of your data.
• Withdraw consent: Where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond in accordance with applicable law. We will not discriminate against you for exercising your privacy rights.

10. Supplemental Notice for California Residents

If you are a California resident, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), provides you with additional rights:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt out of the sale or sharing of your personal information
• The right to non-discrimination for exercising your CCPA rights
• The right to correct inaccurate personal information

We do not sell or share your personal information as defined under the CCPA/CPRA.

To submit a verifiable consumer request, contact us at [email protected]. You may designate an authorized agent to make a request on your behalf by providing written authorization.

11. European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, our legal bases for processing your personal data include:

• Contract: Processing necessary to provide the Service you requested.
• Legitimate interests: Analytics, security, fraud prevention, and improving the Service, balanced against your rights.
• Consent: Where you have given explicit consent (e.g., marketing communications).
• Legal obligation: Where processing is required by applicable law.

You have the right to lodge a complaint with your local data protection supervisory authority.

12. Children's Privacy

The Service is not directed to individuals under the age of 13 (or such higher age as required by applicable law). We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information promptly.

13. Not Financial Advice

The information provided on Vantafin, including blog posts, market data, quotes, charts, screeners, leaderboards, research tools, document search, alerts, API and WebSocket data, MCP tools, and AI-generated content, is for informational and educational purposes only. It does not constitute investment advice, financial advice, trading advice, tax advice, legal advice, or any other form of professional advice.

DTS Analytics LLC (operating as Vantafin) is not a registered investment adviser, broker-dealer, or fiduciary, and nothing on the Service should be construed as a solicitation, recommendation, endorsement, or offer to buy, sell, hold, or trade any security, cryptocurrency, or other financial instrument. No adviser-client, broker-customer, or similar relationship is created by your use of the Service. Past performance is not indicative of future results.

Market data and other information on the Service may be delayed, incomplete, outdated, or incorrect, and may contain errors or omissions. You must independently verify all information against primary sources before making any investment, trading, or financial decision. You are solely responsible for your own investment, trading, and financial decisions and for any tax obligations arising from them. To the fullest extent permitted by law, DTS Analytics LLC is not liable for any losses, including investment or trading losses, arising from your use of or reliance on the Service or any information it provides.

For the complete financial and market disclaimers governing your use of Vantafin, see our Terms of Service and AI Policy.

14. Third-Party Links

The Service may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policy of every site you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required by law, provide additional notice (such as email notification). Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

DTS Analytics LLC is the data controller for the personal information we process. If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at: