What we keep,
what we never touch.
Account data
- Email address, password hash, account status, and the subscriptions record (plan type, period, renewal flag, payment reference).
- Your watchlists and saved symbols — these exist server-side so they follow you between the terminal and the desktop app.
- Sessions: a token plus the sign-in timestamp needed to keep you signed in.
What we do not store
- Card numbers. Payments are handled by the payment processor; we keep only its reference.
- Your holdings, cost basis or portfolio. Research you do locally stays local — the desktop app keeps its data in your own machine's store.
- Third-party advertising identifiers. There are no ad scripts, no marketing pixels and no analytics vendors on the marketing site or in the terminal bundle.
Requests and logs
Requests to resoraai.com and web.resoraai.com pass through Cloudflare and our own web server, which record request metadata — IP address, user agent, path, timing — used for abuse control and diagnosis. The terminal subdomain serves only browsers: non-browser user agents are refused, there is a hidden canary link that real visitors never fetch, and repeated abuse gets an IP blocked. Search and AI crawlers are explicitly allowed on this marketing site and are not refused for that reason.
One third-party asset
The stylesheet on this site loads two web fonts (Inter, IBM Plex Mono) from Google Fonts, which means your browser makes a request to Google and shares its IP address with them. The terminal screens work the same way. If we self-host the fonts, this section is deleted and nothing else about the product changes.
Queries and the assistant
Terminal search and panel queries go to our own API and are used to serve that request. The assistant panel sends its prompt to the model endpoint you configure in Settings — an OpenAI-compatible endpoint under your own key — rather than to a model we operate. We do not sell your queries, and we do not use them or your watchlists to train a model.
Retention and deletion
- Account rows, watchlists and sessions stay until you ask us to delete the account through the app; deletion removes them from the live store.
- Subscription records may be retained for accounting as long as law requires.
- We hold no EU/UK representative arrangement and make no data-broker claims; we are not a data broker and do not buy or resell personal data.
Contact
Privacy and data questions go through the app, or as an issue on the open-source pipeline repository for anything technical.