Privacy Policy

Last updated: September 10, 2026

This policy explains how Gapperz handles information when you visit our website, use our research tools or join our email list. Optional analytics is your choice. Contact support@gapperz.com about privacy or your data.

Your privacy choices

No account is needed. Change these choices at any time in each browser. Turning off optional analytics does not affect the scanner or your subscription.

Enable JavaScript to change these controls. Optional analytics does not run without JavaScript.

Who we are

Gapperz is operated by Timaion LLC, a California limited liability company responsible for the personal information described in this policy. You can contact us at support@gapperz.com or write to Timaion LLC, 2108 N St Ste N, Sacramento, CA 95816, United States.

Information we handle

  • Accounts and billing: your email, account identifiers, subscription plan, payment status and acceptance of legal disclosures. AWS Cognito handles authentication; passwords are not stored in Gapperz’s application database. Stripe processes payments; Gapperz does not store full payment-card numbers.
  • Your workspace: saved scans, watchlists, alert rules and settings. Some notes, paper plans and interface preferences are stored in your browser. Server deletion does not clear local browser storage.
  • Messages and email preferences: information you send to support, your newsletter email, consent and confirmation records, and unsubscribe preferences.
  • Service and security records: IP address, browser and device information, request times, diagnostic errors and records needed to deliver alerts, protect accounts and investigate abuse.
  • Optional analytics: page visits, interactions, performance, campaign referrals and session replay, when you allow product analytics. Where enabled, consented checkout measurement also includes the first subscription payment’s plan, amount and currency. Account activity may be associated with a pseudonymous identifier rather than your email.

Why we use it

We use information to provide the service, maintain accounts and subscriptions, deliver requested alerts, respond to support, prevent misuse and meet legal obligations. With your choice, we use product analytics to understand and improve the experience. We send promotional research notes and product updates only after you subscribe and confirm your email.

Where a legal basis is required, we rely on performing our agreement for the service you request, consent for optional analytics and subscribed marketing, legitimate interests for proportionate security and service administration, and legal obligations for records we must keep. You can withdraw an optional choice without losing core product access.

Cookies, storage and recordings

Essential cookies and browser storage support authentication, security, your saved workspace and privacy choices. Amplitude and Google Analytics use optional storage and identifiers for analytics. They start only after you allow product analytics. You can change that choice above or in account settings, without signing in to this page.

Session replay is configured to mask page text and form inputs and omit query strings and fragments from page URLs. Analytics properties are filtered to reduce sensitive content. These protections reduce collection; they do not make every diagnostic or usage record anonymous. Browser crash reports are separately adjustable above. Essential server security and service logs continue when optional browser reporting is off.

Choices apply to each browser. Clearing storage or changing devices may require you to choose again. Browser controls can also remove stored data, but blocking essential storage can prevent sign-in or saved settings from working.

Our site does not automatically change its settings in response to a browser’s Do Not Track signal. Use the privacy choices on this page to control optional analytics. We do not sell personal information or share it for cross-context behavioral advertising. When analytics is allowed, the providers listed below receive usage information to provide measurement for Gapperz.

Service providers and AI

Our providers include AWS for hosting, authentication and email; Stripe for payments; Amplitude for product analytics, masked replay and AI usage monitoring; Google Analytics for website measurement; and Sentry for diagnostics. Providers receive information needed for their role, subject to their applicable service terms and privacy arrangements.

When an AI feature runs, relevant market context, headlines, chart images or other inputs needed for that feature are sent to providers such as Anthropic or OpenAI. AI usage monitoring is separate: it records model, usage, cost, latency and error metadata, with prompts, responses and chart images excluded from that monitoring. Avoid including sensitive personal information in anything you submit to an AI feature or support.

We do not sell personal information or use it for cross-context behavioral advertising. We may disclose information when legally required, to protect rights and security, or as part of a business transfer subject to applicable privacy obligations. Links to external news and other websites take you to services with their own practices.

Retention and security

We keep personal information for the purpose it was collected: providing your account, honoring your choices, maintaining necessary payment and consent records, protecting the service, and meeting legal obligations. We remove or de-identify information when it is no longer needed. Retention varies by record and provider; contact us for information about records relating to you.

Newsletter confirmation links expire after 24 hours. Unconfirmed mailing records are scheduled for removal after 30 days. Unsubscribing removes your email from the current mailing record; limited consent and suppression records remain to honor the opt-out. Earlier storage versions are scheduled to expire after 30 days. Subscribing to the newsletter does not create a paid account.

We use access controls, encrypted connections and protected storage to safeguard information. No internet service can guarantee absolute security. Our infrastructure is primarily in the United States, and providers may process information in other countries. Contact us for details about applicable international-transfer arrangements.

Your requests and email choices

Contact support@gapperz.com to request access, correction, deletion or a copy of your personal information. Depending on applicable law, you may also have rights to object, restrict processing or complain to a privacy regulator. We may verify your identity and retain records that the law permits or requires. We will explain any applicable limitation.

Use the unsubscribe link in a research-notes email to stop promotional messages. It does not require an account. Necessary account, billing, confirmation and requested alert messages are separate from marketing. Account deletion and subscription cancellation are separate actions; tell support if you need help with both.

Age and policy updates

Gapperz is intended for adults 18 and over. If you believe a child has provided personal information, contact us so we can investigate and remove it as appropriate.

We will update the date when this policy changes and provide notice of material changes through the service or email. Where a new use requires consent, we will request it before that use.