Privacy Policy
Last updated: June 16, 2026.
This policy describes how Kerno Analytics ("Kerno," "we," "us") collects, uses, and shares information when you use this site and the filing-analysis service it provides. It's a starting template, not a substitute for review by a lawyer familiar with your jurisdiction — see the note at the end of this page.
1. Information we collect
Account information. Name, work email, and company name if you create an account or contact us.
Billing information. Subscription plan and billing cycle. Payment card details are entered directly into Stripe's hosted checkout and never reach Kerno's servers — we receive only a confirmation and a plan identifier from Stripe.
Usage data. Tickers and filings you search or analyze, signal-scanner queries, and basic request metadata (timestamp, IP address) used for rate limiting and abuse prevention.
Local preferences. Theme (light/dark) and a few UI preferences are stored in your browser's local storage, not on our servers.
2. How we use information
To provide and improve the analysis service, process payments, respond to support requests, enforce plan limits and rate limits, and detect abuse. We do not sell personal information.
3. Third parties we share data with
Stripe processes payments and is the party that actually holds your card details; see Stripe's own privacy policy.
Google (Gemini API) processes the ticker and filing text you submit in order to generate the analysis. Filing text itself comes from public SEC EDGAR filings.
We do not otherwise share your account information with third parties except where required by law.
4. Data retention
Account and billing records are kept for as long as your account is active and for a reasonable period after closure for tax, accounting, and dispute-resolution purposes. You can request deletion of your account data at any time (see Section 6).
5. Cookies and local storage
We use local storage (not third-party tracking cookies) to remember display preferences such as dark mode. We do not use advertising trackers.
6. Your rights
You can request access to, correction of, or deletion of your personal data by contacting us at the address below. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.
7. Security
We use industry-standard safeguards, including encrypted connections (HTTPS) and scoped API access, but no method of transmission or storage is 100% secure.
8. Changes to this policy
We'll update the "last updated" date above if this policy changes materially, and will make reasonable efforts to notify active subscribers of significant changes.
9. Contact
Questions about this policy: [email protected].
This is a template, not legal advice
Have a lawyer review and adapt this before you rely on it with real paying customers — especially around data retention, regional rights (GDPR/CCPA), and any claims you make to compliance-sensitive customers.