Privacy policy
Last updated October 29, 2026.
1. Scope
This Privacy Policy explains how 13F.AI LLC, a New Mexico limited liability company ("13F.AI," "we," "us") collects, uses and shares personal information when you use our website at 13f.ai, our mobile apps, our API and MCP server, and our email and push alerts (the "Service"). It is part of our Terms of Service (13f.ai/terms), and capitalized terms not defined here have the meanings given there.
The Service is offered to adults in the United States. By using it, you acknowledge that your information will be handled as described here. This Policy does not cover third-party sites, apps or AI assistants you choose to connect to the Service; their own policies apply.
2. Information We Collect
We collect information you give us, information created when you use the Service, and information from our payment processor and sign-in providers.
| Category | Examples | Source |
|---|---|---|
| Account and identity | Email address, display name, sign-in method, linked sign-in accounts (such as Google), multi-factor authentication settings, account role and status, and the version of our Terms you accepted and when | You; sign-in providers |
| Subscription and payment | Plan, price, billing interval, trial and renewal dates, subscription status and history, Stripe customer and subscription IDs, promo or invitation codes redeemed. Stripe processes your full card number; we do not receive or store it. | You; Stripe |
| Fraud and abuse prevention | A one-way hash of the payment-card fingerprint Stripe provides, used to limit free trials to one per person; security and audit logs | Stripe; automatically |
| Your content and preferences | Watchlists, dashboard layouts, notification and email settings, last-visit times used to show what is new | You; automatically |
| Developer and connected apps | API key names and hashed keys, API and MCP usage counts by key, endpoint and client, connected applications (such as AI assistants), their names, redirect hosts, granted scopes and last use | You; automatically |
| Devices and messaging | Push notification tokens and device platform, records of emails we sent you (type, date, message ID), and whether you opened or acted on them where our email provider reports it | Your device; automatically; our email provider |
| Usage and technical data | IP address, approximate location (country, region) derived from it, browser and device type, pages and features used, referring pages, timestamps, errors and server logs | Automatically |
| Communications | Messages you send us, support requests, feedback, survey answers, and commercial license inquiries (your name, work email, company, intended use and expected volume) | You |
We may combine these categories with each other and with information from public sources. We do not knowingly collect Social Security numbers, financial account numbers (other than through Stripe), precise geolocation, biometric data, or the other "sensitive" categories defined by state privacy laws.
3. How We Use Information
We use the information we collect to:
- provide, operate, personalize and maintain the Service, including watchlists, dashboards, alerts and Developer Access;
- create and manage your account, process payments, manage trials, renewals and cancellations, and send receipts and renewal notices;
- send alerts, digests, product updates and marketing messages, which you can turn off;
- measure usage, fix bugs, and develop and improve our products, data and models;
- show advertising, sponsored placements and affiliate offers, and measure their performance in aggregate (for example, impressions and clicks by page and country);
- detect, prevent and investigate fraud, trial abuse, scraping, security incidents and violations of our Terms;
- enforce our Terms, collect amounts owed, and protect the rights, property and safety of 13F.AI, our users and others;
- comply with law, legal process and requests from government authorities; and
- for any other purpose we disclose when we collect the information or with your consent.
We may create aggregated or de-identified information that does not reasonably identify you and use it for any purpose, including publishing statistics about how the Service is used. We will not try to re-identify de-identified information except to test our de-identification methods.
4. How We Share Information
We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising. If that changes, we will update this Policy first and give you any opt-out the law requires.
We share personal information only as follows:
- Service providers that process it for us under contract, including hosting, sign-in and database (Supabase, Vercel), Google if you choose to sign in with Google, payments (Stripe), bot protection on the free-trial checkout (Cloudflare), email delivery (Resend), push notifications (Apple and Google), customer support and analytics tools.
- Apps you connect. When you connect an AI assistant or other application, or use an API key, we send it the data it requests within the scopes you approved.
- App stores and payment partners as needed to process purchases made through them.
- Advertising partners, but only aggregated performance figures (such as impressions, clicks and conversions by page and month), not your name, email or browsing history. When you click an ad or affiliate link, the partner may learn that you came from 13F.AI.
- Legal and safety. When we believe disclosure is required by law, subpoena or other legal process, or is reasonably necessary to enforce our Terms, collect amounts owed, or protect the rights, property or safety of 13F.AI, our users or the public.
- Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy or sale of all or part of our business or assets, in which case your information may be transferred to the acquirer or successor, who may use it as described in this Policy.
- Affiliates under common control with 13F.AI, who will follow this Policy.
- With your direction or consent, and in aggregated or de-identified form for any purpose.
5. Cookies and Similar Technologies
We use cookies, local storage and similar technologies that are needed to sign you in, keep you signed in, remember your settings, secure the Service and prevent fraud. We do not use advertising or analytics cookies.
- Necessary. Authentication, session, security and load-balancing cookies. The Service will not work without them.
- Preferences. Your theme, layout and similar settings.
- Third-party widgets. Stock pages embed a TradingView chart, which loads from TradingView and may set its own cookies under TradingView's privacy policy. Starting a Premium checkout shows a Cloudflare Turnstile security check, which loads from Cloudflare and uses your IP address and browser signals to tell people from automated traffic, under Cloudflare's privacy policy.
- Advertising. Our ad placements are served by us and measured in aggregate. We do not currently allow third-party ad networks to place tracking cookies on the Service.
You can block or delete cookies in your browser, but parts of the Service may stop working. We do not currently respond to "Do Not Track" signals because there is no common standard for them. Where state law requires it, we treat a Global Privacy Control signal as a request to opt out of any sale or targeted-advertising sharing.
To prevent repeat free trials, we keep a one-way hash of the card fingerprint Stripe gives us. It cannot be turned back into your card number.
6. Public-Record Information About People
The Service publishes information about people that is drawn from government records and other lawful public sources, such as members of Congress and their trades and financial disclosures, corporate insiders who file SEC Forms 3, 4 and 5, executives named in proxy statements, lobbyists, and campaign donors and committees reported to the Federal Election Commission.
We publish this information because it is a matter of public record and public interest. This Privacy Policy's user rights in Section 8 apply to information about our users, not to public-record information we publish about public officials or others, except where the law requires otherwise. Where we draw on FEC individual-contribution records, we follow the federal restriction on using donor names and addresses to solicit contributions or for commercial purposes, and we use them only in aggregated or attributed form as the law permits.
If you believe information about you in the Service is inaccurate, or that we should not display it, email privacy@13f.ai with the page and the correction. We will review it and may correct, annotate or remove it at our discretion.
7. Retention, Security and Other Terms
Retention. We keep personal information for as long as your account is active and afterward for as long as reasonably needed for the purposes in this Policy, including to comply with tax, accounting and legal obligations, resolve disputes, prevent fraud and trial abuse, and enforce our agreements. Billing records are generally kept for at least seven years. Trial-abuse hashes and security logs may be kept after your account is closed. When information is no longer needed, we delete or de-identify it, which may take time to reach backups.
Security. We use reasonable administrative, technical and physical safeguards, such as encryption in transit, hashed API keys and tokens, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee the security of your information. You are responsible for keeping your credentials secure. Report a security problem to security@13f.ai. If a breach affects your personal information, we will notify you as required by law.
Children. The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children under 13 or from anyone under 18. If we learn we have, we will delete it. Contact privacy@13f.ai if you believe a minor has given us information.
Location of processing. We are based in the United States and process and store information in the United States. If you access the Service from elsewhere, you understand that your information will be transferred to and processed in the United States, whose data protection laws may differ from those where you live.
8. Your Choices and Rights
Controls every user has. You can view and update your account details, watchlists and notification settings in the Service. You can unsubscribe from marketing email with the link in any message, turn off push notifications on your device or in settings, revoke API keys and connected apps, and close your account. We will still send service, billing, security and legal messages while you have an account.
State privacy rights. Depending on where you live, and if and to the extent a state privacy law applies to us, you may have the right to: confirm whether we process your personal information and access it; correct inaccuracies; delete it; get a portable copy; and opt out of its sale, of targeted advertising, and of profiling that produces legal or similarly significant effects. These laws include the Indiana Consumer Data Protection Act and the California Consumer Privacy Act, among others.
How to make a request. Email privacy@13f.ai from your account email with the subject "Privacy Request" and the right you want to exercise. We must verify your identity before acting, usually by confirming control of your account email, and we may ask for more information. An authorized agent may submit a request for you if the law allows and you give them signed permission and verify your own identity with us. We will respond within the time the law requires, usually 45 days, which may be extended once where permitted. We may decline requests that are not verified, are manifestly unfounded, excessive or repetitive, or fall under an exception in the law, such as information we must keep for legal, security or fraud-prevention reasons. Requests are free up to the limits the law sets.
Appeals. If we decline your request, you may appeal by replying to our decision with the subject "Privacy Appeal" within 60 days. We will respond to your appeal within the time required by law. If we deny your appeal, you may contact your state attorney general.
Non-discrimination. We will not discriminate against you for exercising your privacy rights. Deleting your information or account may mean we can no longer provide parts of the Service to you.
9. Changes and Contact
Changes. We may update this Policy at any time by posting the new version with a new "Last updated" date. If we make a material change to how we use or share personal information we already hold, we will give you notice by email or in the Service before it takes effect, and we will ask for your consent where the law requires it. Continued use of the Service after the effective date means you accept the updated Policy.
Contact. Questions and requests about privacy go to:
13F.AI LLC, c/o Registered Agents Inc., 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110