dRisk · Your information
Privacy policy
Effective and last updated: October 14, 2026
This policy explains how dRisk handles information when you visit d-risk.ai, create an account, use our research tools or connect another app. dRisk is operated by Evan Brown as an individual, trading as dRisk, and is not currently incorporated.
Information we collect
Account information: your name, email address, password hash, account permissions, subscription status, and sign-in and password-reset records. We store a hashed password rather than your plain-text password.
Research activity: companies on your watchlist, alert preferences, reports opened, and report-email requests. For signed-out report access, we derive a hashed identifier from an IP address and browser information to measure access and apply usage limits. A hashed identifier is not necessarily anonymous.
Communications: information you submit through our contact form or email, including your name, email address, topic and message. When you use Ask dRisk, we process your question, selected filing text and recent conversation context.
Technical information: our hosting services and analytics or advertising providers may process IP addresses, browser and device information, page visits, identifiers, request times and error information. Cookies and browser storage also support sign-in and interface preferences.
How we use information
We use information to create and secure accounts, provide filing research and AI answers, manage subscriptions and payments, maintain watchlists and viewed-report status, send requested reports and alerts, respond to support requests, and troubleshoot the service. We also use usage information to understand and improve dRisk, prevent abuse and enforce access limits.
We send account, security and billing messages as needed to operate the service. We may also send trial guidance and product-related emails. You can use an unsubscribe option where provided or contact us about your email preferences; essential account and transaction messages may still be necessary.
Service providers and other disclosures
dRisk uses service providers for website hosting, database storage, email delivery, payment processing, analytics, advertising and AI processing. They receive information needed for the services they provide. Current integrations include Vercel for hosting, Neon for database services, Resend for email, Stripe for payments, OpenAI for AI features, and Google for analytics and advertising.
Stripe processes payment details. dRisk keeps customer and subscription identifiers and billing status; our application does not store your full payment-card number.
Authorized administration of dRisk includes access to account, subscription, usage and support information. Information may also be disclosed when required by law, to address fraud or security incidents, to protect legal rights, or as part of a business transfer subject to applicable privacy requirements.
AI features and apps you connect
Ask dRisk sends your question, selected text, recent conversation context and relevant filing evidence to OpenAI to generate an answer. Avoid entering sensitive personal information or confidential material that is not needed for your question. Processing by AI service providers is subject to their applicable terms and data-handling practices.
If you authorize a connection to ChatGPT or another compatible app, dRisk stores connection permissions and credential records and returns information allowed by those permissions. This can include research reports and, if you authorize it, your watchlist. You can revoke a connection from AI Connections. Revocation stops future authorized access but does not remove information already received by the other app. That app handles the information it receives under its own privacy policy.
Public filings and research data
dRisk analyzes publicly available company filings, including SEC EDGAR reports, obtained directly or through data providers. Filings and derived research may contain names, professional roles and other information disclosed in the source documents. Public availability does not mean that every item is free of personal information.
Our research products focus on company disclosures, comparisons, scores and summaries. Partner research samples are distinct from account records, private watchlists, support messages and visitor activity. If you have a concern about personal information appearing in a report, contact us with the report URL and the relevant passage.
Retention, storage and security
Retention depends on the type of information and its purpose, including operating your account, maintaining research history, support, security, accounting and legal obligations. Signing out, cancelling a paid plan or disconnecting an app does not automatically delete all associated records. Contact us to request deletion or information about retention of a particular record. Some information may need to be retained for legal, security or transaction-record purposes, and backup copies may remain until they are replaced or expire.
Our service providers may process or store information outside your province or country, including in the United States, where different laws and lawful government-access rules may apply. We use safeguards such as encrypted web connections, hashed passwords and access controls. No storage or transmission system can be guaranteed completely secure.
Your choices and privacy requests
You can manage your watchlist and available notification settings, revoke connected apps, and contact us about account information. Depending on the laws that apply to you, you may have rights to access or correct personal information, request deletion, withdraw consent, object to or restrict certain uses, or obtain a copy of your information.
Send privacy requests, including advertising-related opt-out requests, to evan@d-risk.ai. Describe your request and the email address associated with your account, if applicable. We may need to verify your identity before acting. We will explain any limits that apply to a request. Withdrawing information or permissions needed for a feature may prevent us from providing it. You may also raise a concern with the privacy regulator in your jurisdiction.
Children
dRisk is intended for an adult research audience and is not directed at children. If you believe a child has provided personal information to us, please contact us so we can review and address it.
Changes to this policy
We may update this policy as the service or our practices change. The date at the top identifies the latest revision. We will provide additional notice or seek consent for changes where required by applicable law.