Privacy Policy

Scope

This policy covers ConCallIQ’s website and research tools, including accounts, watchlists, the research assistant, optional Pro access, email updates, and the ConCallIQ Reddit app. It describes ConCallIQ’s handling of information. Reddit and other providers have their own privacy terms for information they process directly.

Data we handle

• Account and preferences. When you sign in, Supabase authentication processes account identifiers such as your email address and sign-in provider. Your ConCallIQ profile may include a display name, phone number, plan and expiry, watchlist, and email preferences. If you use a promotion, we also record its code, eligibility, and redemption or payment status.
• Payments. If you start a paid checkout, Cashfree receives the customer name, email, phone number, and order details needed to process it. ConCallIQ stores the account-linked order identifier, amount, currency, plan, payment status, and access period. ConCallIQ does not receive or store your full card number or banking credentials through this order flow.
• Waitlist and email. If you join the waitlist, we store your email address, signup source, page URL, signup time, and email delivery status. Waitlist operational logs use a shortened email hash plus its domain and local-part length, along with the signup source and page URL. Resend delivers email and may hold a waitlist contact and its source/page properties when contact sync is configured. Signed-in users can manage product, marketing, and promotion preferences in their profile; email links also provide an unsubscribe route.
• Product analytics. The site creates a random browser session ID in local storage that expires after 30 days. Product events can include the page path, referring domain, campaign tags, company and quarter viewed, event type, and limited event metadata. After sign-in, an event may be associated with your account ID. Vercel Analytics also measures site usage.
• Research assistant. The assistant receives the question and relevant page context you submit. Straightforward lookups use ConCallIQ’s structured records. For eligible synthesis questions, the question and selected research evidence are sent to MiniMax for response generation. ConCallIQ’s assistant telemetry stores categories and operational measures such as outcome, source count, model, latency, and token estimates; it does not store the raw question or evidence as an assistant transcript. The Reddit bot is separate and does not use an AI model.
• Operational data. We process information needed to protect and operate the service, such as request-rate signals and technical error details. For rate limiting, some endpoints (including the research assistant) use an IP-derived key in server memory for up to one hour. Hosting and service providers may also process connection and request metadata under their own policies.

Reddit bot

When the app is enabled in a community, it reads a new post’s title and text to identify a covered company and earnings-research topic. It sends that text over HTTPS to ConCallIQ for deterministic matching and a source-backed research lookup. The endpoint uses the text to answer the request and does not write the post title or body into ConCallIQ application records or logs.

Devvit app storage keeps a Reddit post ID, a comment ID if a reply is made, timestamp, detected company symbol, and processing outcome for up to 30 days to prevent duplicate replies. Short-lived rate-limit counters expire within two hours. The app does not store Reddit usernames or profile details. Reddit and Devvit may process the post, comment, and related technical data under their own policies. To ask us to find or correct a retained processing record, email us with the post or comment URL; the record otherwise expires automatically.

How we use data

We use information to provide and secure accounts, save watchlists and preferences, deliver research and email, process payments, prevent duplicate or abusive requests, understand product usage, and respond to support, correction, or deletion requests. Public company disclosures and linked research sources are used to build the research available on the site.

We do not use Reddit post text to build a Reddit user profile. The bot uses it only for company matching and the requested research lookup.

Service providers

ConCallIQ uses Supabase for authentication and database services, Cashfree for checkout, Resend for email delivery, Vercel for website hosting and analytics, MiniMax for eligible assistant synthesis, and Reddit/Devvit to operate the Reddit app. These providers receive or process information needed for their specific service. We may also disclose information when required by law or to protect the service and its users.

Retention and deletion

Reddit processing records expire after 30 days. The browser analytics session ID also expires after 30 days. ConCallIQ does not currently configure one automatic expiry period for all account, payment, waitlist, and website analytics records; retention depends on providing the service, support, security, and applicable recordkeeping needs. You can request access, correction, or deletion by emailing us. We will remove information we no longer need, subject to records that must be kept for the service or by law.

Your choices

You can clear local storage in your browser to remove the analytics session ID. You can change email preferences in your profile or use the unsubscribe link in an email. You can request a copy, correction, or deletion of account or waitlist information by contacting hello@concalliq.in. Reddit users can include !stopbot or !no-bot in a post to opt out of an automated reply to that post.

Security and changes

We use technical and organizational measures intended to protect information, but no internet service can promise absolute security. We may update this policy as the product or its data practices change. The updated date at the top indicates when this page was last revised.