Privacy Policy
Last updated: March 20, 2026
1. Who We Are
Disclose (disclose.trade) is a congressional stock trade tracking platform. We aggregate publicly available financial disclosure data filed by members of the U.S. Congress and present it in a searchable, analysable format.
2. Data We Collect
We collect the minimum data needed to operate the service:
- Account data — email address and authentication credentials (managed by Firebase Authentication).
- Billing data — payment information is processed and stored by Stripe. We never see or store your full card number.
- Usage data — watchlist selections, ticker alert preferences, and referral codes you create or use.
- Technical data — IP address, browser type, and page views collected through standard server logs.
We do not use third-party tracking pixels, advertising networks, or sell your data to anyone.
3. How We Use Your Data
- Authenticate your account and manage your subscription.
- Send transactional emails: verification, password reset, and billing receipts.
- Send alert emails you explicitly opt into (watchlist alerts, ticker alerts, weekly digest).
- Enforce plan limits (watchlist slots, ticker alert caps, trade history access).
- Improve the service based on aggregate, anonymised usage patterns.
4. Third-Party Services
We rely on the following processors:
- Firebase Authentication (Google) — identity and login.
- Stripe — payment processing and subscription management.
- Resend — transactional email delivery.
- Cloudflare — DNS, CDN, and DDoS protection.
Each processor has its own privacy policy and is GDPR-compliant.
5. Cookies
We use only essential, first-party cookies required for authentication (Firebase session token). We do not use analytics cookies, advertising cookies, or any third-party cookie-based tracking.
6. Data Retention
Account data is retained for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymised aggregate data (e.g. total trade counts) may be retained indefinitely.
7. Your Rights
You have the right to:
- Access your data — your account page shows all data we hold about you.
- Delete your account — contact us and we will remove your data.
- Export your data — contact us to request a data export.
- Opt out of any non-essential emails at any time.
8. Data Security
All traffic is encrypted via TLS. Passwords are managed by Firebase and never stored by us directly. Payment data is handled entirely by Stripe (PCI DSS Level 1 compliant). Database backups are encrypted and retained for 7 days.
9. Congressional Data
All congressional trade data displayed on Disclose is sourced from public financial disclosures filed with the U.S. House of Representatives and the U.S. Senate. This is public-record data and does not constitute personal data of any site user.
10. Changes
We may update this policy from time to time. Material changes will be communicated via email to registered users. The "last updated" date at the top reflects the most recent revision.
11. Contact
Questions about this policy? Email us at hello@disclose.trade.
