Privacy Policy

Last updated: October 23, 2026

1. What we collect

Human plan and waitlist: your email address. Agent plan: your email address, API key identifier, and API usage metadata (timestamps, endpoints called) — we log key prefixes only, never full API keys. Server logs: standard technical data (IP address, request times) for security and operations. Payments are processed by Stripe; we never see or store your card number.

2. How we use it

To deliver the Service, operate and improve it, prevent abuse, and communicate with you about your account. We don't sell your personal data.

3. Data sources

Company profiles, market snapshots, and key-people data come from public sources (SEC EDGAR, Wikipedia, Yahoo Finance). We cache some of this server-side to reduce load. This is public company information, not personal data.

4. Cookies

If you sign in as a customer, we use one cookie, named customer_session. It is set when you sign in as a customer through a magic link. It is scoped to .junctionarypulse.com, it is HttpOnly and Secure, it is SameSite=Lax, and it lasts 30 days. We use it only to keep you signed in on your profile and account pages. We use no advertising cookies and no tracking cookies.

5. Sharing

We share data only with the service providers needed to run the Service, and when required by law.

• Stripe receives payment and billing details so it can process checkout and manage subscriptions. Card numbers go to Stripe directly and are never seen or stored by us.
• Railway hosts the API and its database, so account data such as your email address, API key identifiers, usage metadata, and logs are stored and processed there to run the Service.
• Cloudflare hosts the websites and routes email, and receives standard technical traffic data such as your IP address and request times to deliver the sites and route email.
• Resend receives the recipient email address and the message content so it can deliver account emails and Pulse emails.
• Anthropic receives public news and company source material sent for summarization to draft Pulses.
• Google Fonts serves the Inter font used on the site. Your browser contacts Google to fetch the font, and Google receives standard technical data such as your IP address.
• GitHub stores database backups containing account data in a private GitHub repository for backup and recovery. Backups are made every 6 hours and the newest 28 copies are kept (about 7 days).

6. Retention

We keep account data while your subscription is active. After cancellation we remove your Pulse follows and retain your account record (email address, API key identifiers, billing history) for audit and fraud prevention — we don't delete it automatically; email support@junctionarysystems.com if you want it deleted. Published Pulses are retained for 90 days; raw data feeds are pruned after 3 days.

7. Security

We use reasonable technical measures to protect your data. No system is perfectly secure.

8. Your rights

Email support@junctionarysystems.com to access, correct, or delete your personal data.

9. Children

The Service isn't directed at children under 13, and we don't knowingly collect their data.

10. Changes

We'll post updates here with a new "last updated" date.

11. Contact

support@junctionarysystems.com