Privacy Policy

We may collect the following categories of information when you use the Service:

• Account information: email address, name, and profile image you provide at registration.
• Research inputs & outputs: the industry keywords you submit, any custom parameters, and the AI-generated reports produced for you.
• Payment data: payment is processed by Waffo Pancake. We do not store full card numbers or CVV on our systems — only Waffo Pancake retains payment instrument data and provides us with a non-sensitive payment token, invoice status, and billing email.
• Usage & diagnostic data: approximate geographic region (country), device and browser type, page views, and performance metrics needed to operate and secure the Service.
• Communications: content you send to support at fuzhengtian8@gmail.com.

• To create and manage your account, authenticate you, and deliver research reports.
• To process subscriptions and payments via Waffo Pancake, send invoices and billing notices.
• To improve, secure and debug the Service, including rate-limiting and abuse prevention.
• To respond to your support requests and send product-related communications (you may opt out of marketing emails at any time).
• To comply with legal obligations: tax records, fraud prevention, and valid legal requests from competent authorities.

We only share your personal information with the following recipients under binding confidentiality or data-processing terms where required:

• Cloudflare: hosting, compute, D1/KV storage, and network logs — see Cloudflare Privacy Policy.
• Waffo Pancake: payment processing, invoices, subscriptions — see Waffo Pancake's own privacy notice on their site.
• AI & search providers: industry keywords you submit are sent to our search/LLM providers (Tavily and DeepSeek) on a transient basis to generate reports. They are not used by those providers to train their public models unless stated otherwise in their public policies.
• Email delivery: Resend or similar providers for transactional emails (verification, reset, billing).
• Legal requests: where compelled by valid law, court order, or to protect our rights, users or safety.

We do not sell personal information to any third party.

• Account data: kept until account deletion + a short grace period to enable recovery.
• Research tasks, reports, and exports: kept while your account is active, or for 30 days for guest tasks (via public tokens).
• Billing records: kept for the longer of (a) the period required by tax and accounting law, or (b) the active subscription period plus 7 years.
• Support communications: retained for up to 3 years to reference for follow-up.

We use essential cookies only, for the following purposes:

• Authentication (Better Auth session cookie) — required to keep you signed in.
• Preference: theme (light/dark), locale (language) selection.
• Security: anti-CSRF tokens, rate-limiting fingerprints.

We do not place marketing or advertising tracking cookies. You can control cookies via your browser settings; blocking authentication cookies may prevent you from logging in.

The Service is hosted on Cloudflare Workers with primary storage located in the United States and other regions available on the Cloudflare network. Your information may be transferred to and processed in jurisdictions outside your country of residence. Where such transfers occur, we rely on standard contractual clauses or other legally recognized transfer mechanisms to protect your data.

Depending on your jurisdiction, you may have the following rights in relation to your personal information:

• Access — obtain a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Erasure — request deletion, subject to legal retention obligations.
• Restriction / Objection — restrict or object to certain processing.
• Data portability — export your account and report data in machine-readable format.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.
• Lodge a complaint — with your local data protection authority.

To exercise any of these rights, email fuzhengtian8@gmail.com from the address associated with your account. We will respond within 30 days.

The Service is not directed to, and we do not knowingly collect information from, children under the age of 13. If you believe we have collected information from a child under 13, please contact us at fuzhengtian8@gmail.com and we will promptly delete it.

We implement a layered approach to security: HTTPS/TLS for all traffic, encryption-at-rest in Cloudflare D1 and KV, role-based access for internal personnel, and rate-limiting on sensitive endpoints. No method of transmission over the Internet is 100% secure, but we take commercially reasonable steps to protect your information.

We may update this policy from time to time. Material changes are posted on this page with a new "Last updated" date; where reasonable, we notify subscribed users by email. Continued use after the effective date constitutes acceptance.

For any privacy-related questions, requests, or to designate an authorized agent, contact our data protection point of contact at:

fuzhengtian8@gmail.com

Controller: AI INDUSTRY RESEARCH Operator (registered jurisdiction: Singapore).