RiskHawk1. Introduction
RiskHawk LLC (“we,” “us,” or “our”) operates the RiskHawk platform, a risk intelligence service for publicly traded securities. This Privacy Policy describes how we collect, use, and safeguard information when you use our website and services. By accessing or using RiskHawk, you agree to the practices described in this policy.
2. Information We Collect
Account information. When you register, we collect your name and email address through Clerk, our authentication provider. We do not store passwords directly -- authentication is managed entirely by Clerk.
Payment information. Subscription payments are processed by Stripe. We never receive or store your credit card number, CVV, or full billing details. Stripe handles all payment data in accordance with PCI DSS standards.
Usage data. We collect information about how you interact with the platform, including pages visited, features used, search queries entered, and session duration. This helps us understand what is working and what needs improvement.
Analytics. We use Google Analytics 4 to collect anonymized usage statistics such as page views, referral sources, and general geographic region. Google Analytics does not collect personally identifiable information in our configuration, and you can opt out via browser extensions such as the Google Analytics Opt-out Add-on.
AI chat conversations. When you use the “Ask RiskHawk” AI assistant, your messages are transmitted to Anthropic’s Claude API for processing. Anthropic may retain these messages in accordance with their own privacy policy. We recommend avoiding the inclusion of personally identifiable or sensitive financial information in AI chat inputs.
3. How We Use Your Information
We use collected information to provide and operate the RiskHawk platform, process your subscription payments, deliver email alerts and morning brief digests when you have subscribed to them, respond to support inquiries, and analyze usage patterns to improve the service.
We do not sell your personal data to third parties. We do not use your data for targeted advertising. We do not share your data with any third party except as described in this policy or as required by law.
4. Data Storage and Security
Your account and usage data is stored on Supabase, a cloud PostgreSQL database hosted in the European Union (Frankfurt, Germany). Authentication data is managed by Clerk, which is SOC 2 Type II certified. Payment data is handled by Stripe, which maintains PCI DSS Level 1 compliance.
We apply industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
5. Third-Party Services
RiskHawk integrates with several third-party services to deliver its functionality. Each provider operates under its own privacy policy and security standards.
Clerk provides user authentication and session management. Stripe processes subscription payments. Supabase hosts our database. Google Analytics provides anonymized usage analytics. Anthropic (Claude API) powers the AI chat assistant.
6. Cookies
We use only essential cookies required for authentication (set by Clerk) and anonymized analytics (set by Google Analytics 4). We do not use advertising cookies, tracking pixels, or cross-site trackers. You can configure your browser to block or delete cookies at any time.
7. Your Rights
You may access your account data at any time through your account settings. You may delete your account, which will remove your profile and associated data from our systems. You may opt out of marketing and alert emails by updating your notification preferences in your account settings or by clicking the unsubscribe link in any email we send. For other data requests -- such as a full export of your data or a request for data deletion beyond account closure -- please contact us at the address below.
8. Contact
For privacy-related inquiries or data requests, please contact us at privacy@riskhawk.io. We will respond within 30 days.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If changes are material, we will notify registered users by email. Continued use of RiskHawk after changes are posted constitutes acceptance of the updated policy.