Privacy policy

Last updated: April 29, 2026

Who this applies to

This policy applies to visitors of our marketing site and to individuals who create or use a Goldman Facts account, including when you run analyses, save a portfolio, view history, share read-only report links, or manage billing where offered.

Information we collect

Depending on how you use the product, this may include:

• Account and authentication data. For example, an email address and credentials used to sign in, plus technical identifiers associated with your session (such as tokens issued by our authentication provider).
• Inputs you provide. Tickers, portfolio composition, prompts or settings you submit to generate reports, and related metadata needed to run and display results.
• Generated content and history. Reports, summaries, derived metrics (such as accuracy-related statistics where the product surfaces them), and timestamps associated with your activity.
• Billing-related information. If you subscribe or purchase credits, our payment processor receives and processes payment details; we typically receive limited billing metadata (for example, subscription status or transaction references), not your full card number.
• Technical and security data. Standard server and application logs (such as IP address, device/browser type, rough timing, and error diagnostics) used to operate the service, prevent abuse, and troubleshoot.

How we use information

We use the above categories to provide and secure the service (including authentication, generating and storing reports, enforcing limits tied to your plan, and credit accounting where applicable), to communicate about your account or the product when appropriate, to understand aggregate usage and reliability, to comply with law, and to protect the rights, safety, and integrity of users and the service.

Where processing happens

The product is hosted on cloud infrastructure. Today that stack includes Google Firebase and related Google Cloud services (for example, authentication, database/storage, and server-side functions). Your information may be processed in the United States and other countries where those providers operate facilities. By using the service, you acknowledge that cross-border transfers may occur.

Sharing

We do not sell your personal information in the conventional sense of selling lists to data brokers. We share information with service providers as needed to run the product (including infrastructure, payments, and email or operational tooling we may use), when required by law or legal process, or to respond to legitimate requests from public authorities. We may also share information if we believe disclosure is necessary to prevent harm, investigate fraud, or enforce our terms.

Retention

We retain information for as long as your account is active and for a reasonable period afterward for backups, security, and legal compliance. Actual retention can vary by data type and system. If you ask to delete your account, we will delete or anonymize personal information where feasible, subject to limited exceptions (for example, records we must keep for tax, fraud prevention, or legal reasons).

Security

We implement reasonable administrative, technical, and organizational measures appropriate to the nature of the service. No online service can guarantee absolute security.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export certain information, or to object to or restrict certain processing. Laws vary. If you wish to exercise a request, contact us as described on our Contact page. We may need to verify your identity before fulfilling certain requests.

Children

The service is not directed at children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children in that category.

California residents

If California privacy laws apply to you, you may have additional rights regarding certain disclosures and opt-outs. Because we do not sell personal information in the traditional sense described above, we do not maintain a “Do Not Sell” signal workflow specific to brokered sales. For requests under applicable California law, use the contact path described on our Contact page.

Changes

We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Material changes may also be communicated through the product or by email where appropriate.

Contact

For privacy-related inquiries, please see Contact.