Privacy Statement
Last updated: 2026-05-24
1. About this statement
This Privacy Statement explains what personal information Falfield Capital LLC collects through the Falfield Terminal, why we collect it, how we use it, and the choices you have. It applies to the Falfield Terminal at terminal.falfield.com and our public website at falfield.com.
2. Information we collect
When you sign in to the Terminal with Google, we receive your email address, name, profile photo URL, and Google account identifier. We record the time of each successful sign-in.
As you use the Terminal, we store the research you produce - watchlists, theses, notes, DCF models, calendar events, and related content - in our database, scoped to your account.
We do not deliberately collect any other personal information. We do not collect payment information; the Terminal is not a commerce product.
3. How we use the information
We use the information only to operate the Terminal: to authenticate you, to render your research back to you, to scope features to your account, and to administer the access list. We do not sell personal information, and we do not use it for advertising.
4. Service providers
The Terminal relies on the following third parties:
- Google LLC - OAuth sign-in. Google sends us the profile data described above when you sign in.
- Vercel Inc. - web hosting and edge delivery. Vercel processes incoming HTTP requests on our behalf and may log standard request metadata (IP address, user agent, timestamps).
- Supabase, Inc. - our database provider. Your account information and the research you produce are stored on Supabase's infrastructure under our control.
- Finnhub Stock API - real-time market data. We send Finnhub the ticker symbols you view; we do not send personal information.
- Yahoo Finance - split-adjusted 52-week price ranges. Same as above: we send the ticker symbol only.
- U.S. Securities and Exchange Commission (SEC EDGAR) - public filings. Used for company filings; no personal data is sent.
These providers process information under their own terms and privacy policies. Their use of any data is restricted to what is necessary to provide their services to us.
5. Cookies and similar technologies
We use a single first-party session cookie set by NextAuth.js to keep you signed in. We do not use third-party advertising cookies. The Terminal stores certain UI preferences (dashboard layout, notes) in your browser's local storage; that data never leaves your device unless you explicitly save it as part of your research.
6. Retention
We retain account information and research content for as long as your account is active. When access is revoked or you request deletion, we remove the associated account row; we retain operational backups for up to thirty (30) days.
7. Security
We use commercially reasonable safeguards including encryption in transit (TLS), restricted server-side credentials, and an allowlist-based access model. No system is perfectly secure, and we cannot guarantee absolute security of the information we hold.
8. Your rights
Depending on where you reside, you may have rights under applicable data-protection laws - including the right to access, correct, or delete the personal information we hold about you, or to object to certain processing. To exercise any of these rights, email legal@falfield.com.
9. Changes
We may update this Privacy Statement from time to time. The “Last updated” date above will reflect the change.
10. Contact
Falfield Capital LLC
legal@falfield.com