Privacy Policy

If you only browse, we do not know who you are. We hold no account record for you and our analytics do not build a profile of you.

If you create an account, we store:

• Your email address and the account identifier issued by Auth0, our login provider.
• Your Stripe customer identifier and your subscription status and renewal date, for Pro and for the MCP server. We never receive or store your card number — Stripe handles payment details end to end.
• The watchlists you create, and the tickers in them.
• Your view history: which companies, drug assets, and diseases you opened, and when. This drives the recently-viewed list in the app.

We do not ask for your name, postal address, phone number, date of birth, brokerage account, or holdings, and there is nowhere in the product to give them to us.

We use PostHog to count page views, because at our size the only question that matters is whether anyone arrives at all. It is deployed in cookieless mode: no analytics cookies are set, no identifier is persisted between visits, and person profiles are turned off, so events are anonymous rather than stitched to a person. PostHog processes your IP address to derive an approximate location (country and region level) and to filter bot traffic.

We also run Google's advertising tag so we can tell whether an ad we paid for led to a signup. Unlike our product analytics, this does set cookies and Google may use the data for its own advertising measurement, subject to Google's privacy policy. You can limit this at Google Ad Settings or with any standard tracker-blocking extension, and blocking it does not affect how FuzeBio works.

• Session cookie (essential). Set by Auth0 when you log in, so you stay logged in. Without it there is no account.
• Google advertising cookies. Described above. Not essential — block them freely.
• No analytics cookies. PostHog is configured to keep its state in memory for the length of the tab and set nothing.

Research is generated on demand by large language models reached through OpenRouter. What we send is the subject of your request — a ticker, a drug, a disease, or the question you typed — together with public source material. We do not send your name, your email, or your account identifier with it, so the model providers receive the query without the person behind it.

Generated reports are cached for up to seven days and served to anyone who asks for the same subject. The cache is keyed on the subject, never on you.

We use these providers, and no others touch your personal data:

• Auth0 (Okta) — login and account identity.
• Stripe — payments, subscriptions, and card handling.
• Railway — hosting for the site, the API, the database, and the cache.
• PostHog — cookieless page-view analytics.
• Google — advertising conversion measurement.
• OpenRouter and the model providers it routes to — generating research, without account identifiers.
• Massive — market and pricing data.

We do not sell your personal information and we do not share it with data brokers, advertisers, or anyone else for their own marketing.

FuzeBio is operated from the United States and your data is processed there. If you are in the EEA or UK, using the service means your data crosses to the US.

We keep account data while your account exists. Delete your account and we delete your account record, watchlists, and view history. Billing records are kept as long as tax and accounting law requires, which is generally seven years — that obligation sits with Stripe's records as much as ours.

Wherever you live, you can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it and close your account. Email support@getfuzebio.com from the address on your account and we will action it within 30 days. There is no charge, and asking will not degrade your service.

If you are in the EEA or UK you also have the right to object to processing and to complain to your local data protection authority. If you are in California, you have the right to know, delete, and correct, and the right not to be discriminated against for exercising them — and, as above, we do not sell or share personal information as those terms are defined there.

FuzeBio is for adults making their own investment decisions. It is not directed at anyone under 18 and we do not knowingly collect data from them. If you believe a minor has an account, email us and we will delete it.

Access is authenticated on every request and account data is scoped so one account cannot read another's watchlists or history. Traffic is encrypted in transit. No system is perfect; if we ever suffer a breach affecting your data, we will tell affected users without undue delay.

If we change what we collect or who processes it, we update this page and the date at the top. Material changes are announced to subscribers by email. The commit history for this page is part of the product's source, so the change is always datable.

Privacy questions, data requests, or anything else: support@getfuzebio.com. See also our Terms of Service and the contact page.