Privacy Policy

1. Introduction

DTS Analytics LLC ("DTS Analytics", "Company", "we", "us", "our") operates the Vantafin platform, including the website and all related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Service.

By accessing or using Vantafin, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

This Privacy Policy does not apply to data that our users may independently collect or process using the Service ("User Content"). Any questions about User Content should be directed to the respective user.

2. Information We Collect

a. Information You Provide

• Account information: When you register, we collect your name, email address, and password (stored in hashed form). If you sign in via Google OAuth, we receive your name, email, and profile identifier from Google.
• Payment information: If you subscribe to a paid plan, payment details are collected and processed by our third-party payment processor (e.g., Stripe). We do not store full credit card numbers on our servers.
• Communications: If you contact us for support or provide feedback, we collect the content of those communications along with your email address.

b. Information Collected Automatically

• Usage data: We collect information about how you interact with the Service, including pages visited, features used, search queries, timestamps, referring URLs, and session duration.
• Device and network data: We may collect your IP address, browser type and version, operating system, device identifiers, screen resolution, and Internet service provider.
• Cookies and similar technologies: We use cookies and similar technologies for authentication, preferences, analytics, and security. See Section 4 below for more information.

c. AI Interaction Data

When you use AI-powered features, we collect the prompts, queries, and content you submit ("AI Inputs") and the responses generated ("AI Outputs"). This data is used to provide the Service, maintain conversation history, detect abuse, and improve the quality and safety of our AI features.

d. Financial and Market Data

Vantafin may allow you to create watchlists, save research, and interact with financial data. We collect and store such data to provide the Service. We do not collect brokerage account credentials, portfolio holdings, or trading account information unless explicitly stated in a specific feature.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and operate the Service: Account management, authentication, feature delivery, and customer support.
• Process payments: Billing, invoicing, and subscription management through our payment processor.
• Improve the Service: Analytics, debugging, performance monitoring, product development, and user experience research.
• AI features: Processing AI Inputs to generate AI Outputs, safety and abuse filtering, and improving AI quality. We do not use your AI Inputs to train third-party AI models unless you explicitly opt in.
• Security and fraud prevention: Detecting and preventing unauthorized access, abuse, fraud, and other harmful activities.
• Communications: Sending transactional emails (account verification, password resets, billing), service announcements, and, with your consent, marketing communications.
• Legal compliance: Complying with applicable laws, regulations, legal processes, or governmental requests.

4. Cookies and Tracking Technologies

We use the following categories of cookies and similar technologies:

• Strictly necessary: Required for authentication, security, and core functionality. These cannot be disabled.
• Analytics: Help us understand how users interact with the Service so we can improve it. We may use third-party analytics tools such as Google Analytics.
• Preferences: Store your settings and preferences (e.g., theme, language).

You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of the Service.

5. How We Share Your Information

We may share your information with the following categories of third parties:

• Service providers: Hosting, payment processing, email delivery, analytics, customer support, and AI model providers that help us operate the Service. These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.
• AI infrastructure providers: Your AI Inputs may be transmitted to third-party large language model providers to generate responses. We require these providers to maintain appropriate data protection standards.
• Legal and safety: We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect rights, safety, or property.
• Business transfers: In connection with a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of the transaction.

We do not sell your personal information. We do not share your personal information with third parties for their own direct marketing purposes.

6. International Data Transfers

Your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to these countries.

Where required by applicable law (e.g., for transfers from the European Economic Area, United Kingdom, or Switzerland), we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms to protect your personal data.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for a limited period as necessary to:

• Comply with legal obligations (e.g., tax, accounting, or regulatory requirements)
• Resolve disputes and enforce our agreements
• Prevent fraud and abuse
• Maintain security and backup integrity

AI interaction history is retained while your account is active and may be deleted upon request. Aggregated or de-identified data that cannot be used to identify you may be retained indefinitely.

8. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), access controls, and secure credential storage. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request confirmation of whether we process your personal data and obtain a copy of it.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
• Restriction / Objection: Request restriction of, or object to, certain processing of your data.
• Withdraw consent: Where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond in accordance with applicable law. We will not discriminate against you for exercising your privacy rights.

10. Supplemental Notice for California Residents

If you are a California resident, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), provides you with additional rights:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt out of the sale or sharing of your personal information
• The right to non-discrimination for exercising your CCPA rights
• The right to correct inaccurate personal information

We do not sell or share your personal information as defined under the CCPA/CPRA.

To submit a verifiable consumer request, contact us at [email protected]. You may designate an authorized agent to make a request on your behalf by providing written authorization.

11. European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, our legal bases for processing your personal data include:

• Contract: Processing necessary to provide the Service you requested.
• Legitimate interests: Analytics, security, fraud prevention, and improving the Service, balanced against your rights.
• Consent: Where you have given explicit consent (e.g., marketing communications).
• Legal obligation: Where processing is required by applicable law.

You have the right to lodge a complaint with your local data protection supervisory authority.

12. Children's Privacy

The Service is not directed to individuals under the age of 13 (or such higher age as required by applicable law). We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information promptly.

13. Third-Party Links

The Service may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policy of every site you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required by law, provide additional notice (such as email notification). Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

DTS Analytics LLC is the data controller for the personal information we process. If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at: