Disclosure

Privacy

Effective September 8, 2026 · v5 · a concise summary, not a substitute for full legal terms.

GET UP STRATEGIES provides a private research console with individually approved account access. There is no public signup. We collect the information needed to operate it and we do not sell your data.

What we store

• Managed-account usernames, hashed passwords and temporary-credential expiry and use records. For admin-assisted recovery, an authorized administrator separately records a verified email, phone number and verification reference before a recovery request is accepted. These trusted contact records remain until updated or the managed account is closed. The owner credential and MFA configuration are held in the hosting service's secret configuration.
• A single first-party, signed session cookie so you stay signed in. Optional two-factor is supported.
• Your workspace: saved layouts, watchlists, alert rules, company research notes and their source links, research history, portfolio inputs, and AI conversations or briefings that you create.
• Operational and security logs, including request timing, errors, account activity, and client network information used to secure the service.
• The super admin manages all accounts and administrator roles. Delegated admins manage ordinary users and the support inbox; their administrative actions are recorded.
• Information you submit through the public contact form so we can understand, verify, and respond to your request.

What we do not do

• We do not sell, rent, or publish your data.
• We do not run third-party advertising or cross-site tracking, and we set no advertising cookies.
• We do not build a profile of you for anyone else.

Third parties

The service runs on Render. Daily backups of its database, which holds the account and workspace data described above, are stored encrypted with Backblaze B2. Research requests go to data providers including Massive, FRED, BLS, and BEA. If you use AI features, your prompt and relevant research or workspace context may be sent to the configured AI provider (OpenAI or Anthropic). Avoid including personal or confidential information in prompts. Provider processing is subject to the applicable account agreements.

Retention & your choices

• Your saved items persist until you delete them or your account is closed.
• Contact requests include email addresses and messages. Password-reset requests also include a username and phone number for admin review and follow-up. Submitted details alone do not establish account ownership. Requests and their private case history are eligible for deletion when both the receipt and its resolution are older than the configured retention period (730 days by default), unless a preservation hold applies. Open requests remain available for follow-up. Security audit records default to 730 days; production retention settings and backup expiry are still being reviewed before external access opens.
• Closing a managed account removes its active account data and access. A retired username is retained to prevent reassignment. Copies in backups follow the backup retention schedule and may persist until those backups expire.
• You can request access to, correction of, or deletion of your account data through the public privacy-request form. No account or sign-in is required.

We may need to verify your identity before fulfilling a data-rights request so account information is not disclosed to or changed by the wrong person.