This Privacy Policy describes how FlossBite LLC ("we", "us", "our") operating Investor Sam collects, uses, and protects your information when you use investorsam.com ("Service").
Payments are processed by Stripe, Inc. We do not collect, store, or process your credit card numbers, bank account details, or other sensitive payment information. Stripe stores a tokenized card fingerprint for fraud prevention purposes only. See Stripe's Privacy Policy at stripe.com/privacy.
We use your information to: (a) provide, maintain, and improve the Service; (b) process subscription payments and manage your account; (c) send transactional emails (account confirmation, subscription receipts, support replies) via Resend.com; (d) detect and prevent fraud, abuse, and unauthorized access; (e) comply with legal obligations; (f) respond to support requests. We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.
We use the following trusted third-party services, each with their own privacy practices:
We implement industry-standard security measures including:
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we take all reasonable precautions.
We retain your account data for as long as your account is active. Deleting your account (Account Settings → Delete Account) starts a 7-day grace period: your account is signed out everywhere and any active subscription is cancelled immediately, and your personal data — profile, portfolios, watchlists, saved screens, chat history and more — is permanently erased 7 days later, well within the 30 days we commit to above. During those 7 days you cannot sign back in; contact [email protected] if a deletion was requested in error. Some records are kept beyond that where the law or a legitimate business purpose requires it (e.g., financial transaction records required for tax/accounting) — we hold no payment records ourselves, since Stripe processes and retains those under its own policy. Log data is retained for up to 90 days. Our hosting provider's infrastructure-level backups/snapshots (not a database backup we create or control) may retain a copy of deleted data for that provider's own retention period before it fully ages out.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email [email protected] with subject "Privacy Request". We will respond within 30 days.
We use session cookies required for authentication. In addition, we use the following third-party services that set their own cookies:
You can control cookie settings in your browser. Note that blocking advertising cookies will prevent ads from showing but will not affect core functionality.
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided personal information, we will delete it immediately. If you believe we have inadvertently collected such information, contact us at [email protected].
Our servers are located in the EU (Hetzner, Germany). If you are accessing the Service from outside the EU/EEA, your data may be transferred to and processed in jurisdictions with different data protection laws. By using the Service, you consent to this transfer.
We may update this Privacy Policy periodically. Material changes will be communicated via email or a notice on the platform. The effective date at the top of this page always reflects the most recent version. Continued use of the Service after changes constitutes acceptance.
For privacy questions, data requests, or concerns:
FlossBite LLC — Investor Sam
Email: [email protected]
Website: https://investorsam.com