Privacy Policy

Last updated: October 2026.

Aardvark Labs Capital Research ("Aardvark Labs", "we", "us") operates research.aardvarklabs.co. This policy explains what personal information we collect when you create an account, buy a subscription, or download our financial models, how we use it, and the choices you have.

Information we collect

  • Account information. When you register, we collect your email address and, optionally, your name. Your password is handled and stored by our authentication provider (Supabase) in hashed form; we never see or store your plaintext password. If you sign in with Google, we receive your name, email address, and profile picture from Google (OAuth scopes openid, email, and profile). We use them only to create and identify your account.
  • Download activity. When you download a financial model, we log the ticker, the time, and technical metadata (IP address, browser user-agent, and referring page) associated with your account.
  • Payment information. If you buy a subscription, Stripe collects your payment details, such as your card number and billing address. We do not receive or store your full card number. We can see a limited set of details in Stripe: a customer reference, your plan and subscription status, the billing location used to calculate tax, and your card brand and last four digits.
  • Communications. If you opt in, we add your email to our research mailing list.
  • Usage analytics. We use Google Analytics to understand how the site is used. It collects information such as the pages you view, your approximate location (derived from your IP address), your device and browser type, the site that referred you, and clicks on model download links, including the ticker. Google Analytics uses cookies to recognize repeat visits.

How we use it

  • To create and secure your account and to authenticate you.
  • To provide access to gated financial models, to maintain your download history, and to count your model downloads against any monthly download allowance.
  • To process payments, manage your subscription, calculate taxes, and prevent fraud.
  • To understand, in aggregate, which research and models readers find valuable.
  • To send research updates, only if you have opted in (you can unsubscribe at any time).

How we share it

We do not sell your personal information. We share it only with the service providers that operate this site on our behalf:

  • Supabase — authentication, the account database, and account emails (sign-up confirmation and password reset).
  • Cloudflare — hosting, content delivery, and model storage.
  • Google — website analytics (Google Analytics). Google processes this data under its own privacy policy. Google also provides "Sign in with Google". Our login page loads Google's sign-in script (accounts.google.com/gsi/client), and Google processes that sign-in under the same privacy policy.
  • Stripe — payment processing, subscription billing, tax calculation, and fraud prevention. Stripe may also use some of this data for its own purposes, such as fraud prevention and legal compliance, under its own privacy policy.
  • Resend — research emails, if you opt in.

We may also disclose information if required by law.

Google user data

If you choose "Sign in with Google", Google shares a limited set of information from your Google Account with us. This section explains how we handle it.

  • What we access. Your name, email address, and profile picture, through the OAuth scopes openid, email, and profile. We do not request access to your Gmail, Google Drive, contacts, calendar, or any other Google data.
  • How we use it. Only to create your account, sign you in, and show your name and email address on your account page. We do not use it for advertising, and we do not use it to train AI or machine-learning models.
  • How we store it. Our authentication provider (Supabase) stores it with your account record. We never receive or store your Google password.
  • How we share it. We do not sell it or share it with third parties, except the service providers listed above that operate this site on our behalf, or when the law requires it.
  • Retention and deletion. We keep it for as long as your account is active. To delete it, email support@aardvarklabs.co and we will delete your account. You can also remove our access at any time at myaccount.google.com/permissions.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

We use two kinds of cookies:

  • Session cookie (strictly necessary). A secure, HTTP-only cookie that keeps you signed in. Sign-in does not work without it.
  • Analytics cookies. Google Analytics sets first-party cookies (names that begin with _ga) to recognize repeat visits and measure how the site is used.

We do not use advertising cookies. You can block or delete cookies in your browser settings. You can also stop Google Analytics from collecting data about your visits with Google's opt-out browser add-on.

Data retention and your choices

We keep your account information for as long as your account is active. You can request access to, correction of, or deletion of your personal information — including your account and download history — by emailing support@aardvarklabs.co. You can unsubscribe from research emails at any time via the link in any email. We keep billing and tax records for as long as tax and accounting law requires, even after you delete your account.

Children

This site is not directed to children under 16, and we do not knowingly collect their information.

Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

Contact

Questions about this policy: support@aardvarklabs.co.