Last updated: July 12, 2026
Who we are
BullScope (bullscope.ai) is an evidence-first investment research publication and research terminal, operated by our U.S. company registered in Florida. This policy explains what personal data we collect, why, and the rights you have over it. For anything privacy-related, write to privacy@bullscope.ai.
What we collect
Account data. When you create an account we store your email address, a username, your display name, and your membership level. If you register with a password, we store only a salted one-way hash of it. Nobody, including us, can read your password back.
Google sign-in. If you use “Continue with Google”, Google sends us your name, email address, and profile picture. We never receive or store your Google password.
Payments. Paid subscriptions are processed by Stripe. Your card number goes directly from your browser to Stripe and never touches our servers. We store only a Stripe customer reference, your plan, and billing history (for tax and accounting law we must keep billing records for several years).
Usage. We count your use of metered features (for example coverage requests on the free plan) to enforce plan limits. These counters are tied to your account.
Logs. Our servers keep standard access logs (IP address, browser type, pages requested) for security and debugging. Logs are routinely deleted after about 30 days.
Newsletter. If you subscribe to our newsletter we store the email address you give us, and use it only to send the newsletter. Every email includes an unsubscribe link.
Cookies. We use essential cookies only: your login session, your cookie-consent choice, and your dark-mode preference. We currently run no third-party advertising or analytics trackers. If that ever changes, this policy and the cookie banner will change first, and non-essential cookies will require your consent.
What we do not do
We do not sell or rent personal data. We do not share it with advertisers. We do not build advertising profiles, and we make no automated decisions about you that have legal or similarly significant effects.
Why we process your data (legal bases)
Under the EU and UK General Data Protection Regulation our legal bases are: contract (running your account and subscription), legitimate interests (site security, abuse prevention, service improvement), consent (newsletter, and any future non-essential cookies), and legal obligation (tax and accounting records).
Where your data lives
Our servers are hosted on Google Cloud in Belgium, inside the European Union. Some of our service providers are U.S. companies: Stripe (payments), Google (sign-in, hosting), and Gravatar (profile pictures, which are looked up using a hashed form of your email). Transfers to these providers rely on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.
How long we keep it
Account data is kept while your account exists. If you delete your account or ask us to, we erase your personal data within 30 days, except billing records we are legally required to retain and minimal records of the deletion itself. Server logs are kept for about 30 days.
Your rights
You can ask us at any time to: access the personal data we hold about you, correct it, delete it, receive a copy in a portable format, restrict or object to processing, and withdraw any consent you have given. Email privacy@bullscope.ai and we will respond within one month. If you are in the EU or UK you also have the right to complain to your local data protection authority. We honor access and deletion requests from everyone, regardless of where you live, and we do not “sell” or “share” personal information as those terms are defined in U.S. state privacy laws.
Children
BullScope is not directed to children under 16 and we do not knowingly collect their data.
Security
All traffic is encrypted with TLS. Passwords are stored only as salted hashes. Card data is handled exclusively by Stripe. Access to production systems is restricted and logged.
Changes
If we change this policy we will update the date at the top, and for material changes we will notify account holders by email or a site notice before the change takes effect.
