Privacy Policy

Last updated: June 2, 2026

This Privacy Policy describes what information FedOptic ("FedOptic," "we," "us") collects about you, how we use it, and who we share it with when you use the FedOptic service (the "Service").

We run a small, US-focused SaaS. We collect only what is needed to operate the Service, bill you, and support and secure it — nothing more.

1. Information We Collect

Information you provide

• Account information. Email address. Optionally, a display name.
• Authentication information. A hashed password (we never see or store your plaintext password) and email-verification and password-reset tokens, which are used once and then expire.
• Billing information. If you subscribe, payment details go directly to Stripe; we receive a customer/subscription ID and the last four digits of your card, never the full number.
• Content you create in the Service. Notes, favorites, pipeline statuses, saved searches, and any email you provide to join a waitlist.

Information collected automatically

• Usage analytics. Via PostHog: which pages you view, which filters you apply, and which opportunities you open. Events are structured; we do not send free-text content you create to PostHog.
• Error data. Via Sentry: stack traces and request identifiers when the app encounters an error, with non-identifying context. We configure Sentry so that browser form values are not sent.
• Server logs. HTTP method, path, status code, timestamp, IP address, and user-agent.
• Cookies and local storage. We use an authentication token to keep you signed in and analytics cookies set by PostHog. We do not use third-party advertising cookies.

Information we do not collect

• We do not ask for or store Social Security numbers, government IDs, or background-check information.
• We do not sell your data to data brokers or advertisers.
• We do not use advertising tracking pixels or ad-retargeting tools.

2. How We Use Information

• Operate the Service. Authenticate you, render your dashboard, send saved-search alerts and digests you opted into, process payments, and enforce demo-tier limits.
• Communicate. Transactional email (verification, password reset, billing receipts and reminders, and alerts you subscribed to) and occasional product announcements. You can unsubscribe from announcements without losing transactional email.
• Improve the Service. Aggregate usage analytics help us understand what is useful. We do not target or profile individual users.
• Support and debug. When you report a problem, we may correlate your account email with recent error reports to reproduce and fix it.
• Comply with law and protect rights. Respond to lawful requests and protect the security and integrity of the Service. We publish no warrant canary; assume we cooperate with valid U.S. legal process.

3. Third Parties We Share Data With

We use a small number of well-known vendors and share the minimum data each needs to do its job.

Each vendor has its own privacy policy. We do not sell or rent your information to anyone, and we do not share it with third parties for their own direct-marketing purposes.

We may share data in response to lawful legal process (such as a subpoena, court order, or valid law-enforcement request) where we are legally required to do so. We will attempt to notify you before disclosure unless the request prohibits notification or notification is otherwise prohibited by law.

4. Data Retention

• Account data (email, notes, favorites, pipeline statuses, saved searches) is retained while your account is active and for a limited period (about 90 days) after you delete it or it is closed. After that, we delete or de-identify identifying information.
• Server logs are retained for a limited period (generally about 30 days) and then deleted.
• Backups are kept for a limited period to support recovery and are then overwritten.
• Billing records are retained as required by U.S. tax and accounting law (typically up to 7 years). Billing records are held by Stripe and referenced by our customer/subscription IDs.
• Aggregated, de-identified data may be retained indefinitely.

5. Your Rights

You can at any time:

• Access. Request a copy of the personal data we hold about you.
• Correct. Fix inaccuracies by editing your profile or emailing support@fedoptic.com.
• Delete. Request deletion of your account and data. Once the wind-down period passes, identifying information is irrecoverable.
• Export. Request a machine-readable copy of your notes, favorites, pipeline statuses, and saved searches.
• Opt out. Unsubscribe from product announcements via the link in any announcement email. Transactional email (verification, password reset, billing) continues as long as your account is active.

Send any of these requests to support@fedoptic.com. We aim to respond within 30 days, and we will not discriminate against you for exercising these rights.

6. Cookies and Do Not Track

We use a cookie or similar local storage to keep you signed in and analytics cookies to understand product usage. We do not use third-party advertising cookies. Some browsers send a "Do Not Track" signal; there is no common standard for these signals, and we do not currently respond to them. We do not authorize third parties to collect personal information about your activities across other websites through our Service.

7. Your California Privacy Rights

If you are a California resident:

• We describe in this Policy the categories of personal information we collect, the purposes for collecting it, and the third parties we share it with.
• We do not sell or share your personal information, as those terms are defined under California law, and we do not share it with third parties for their own direct marketing (California's "Shine the Light" law).
• You may request access to, correction of, deletion of, or a copy of your personal information as described in "Your Rights" above. We will not discriminate against you for exercising these rights.

To exercise any of these rights, email support@fedoptic.com.

8. Security

No system is perfectly secure, but we take reasonable measures to protect your information. These include, for example: hashing passwords before storage; using single-use, expiring tokens for email verification and password reset; serving all traffic over HTTPS; keeping regular backups; and rate-limiting authentication to deter credential stuffing.

If a security breach affects your personal information, we will notify affected users without undue delay and as required by applicable law.

9. Children

The Service is intended for business users who are at least 18 years old. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 (or under 13 within the meaning of the Children's Online Privacy Protection Act). If you believe a minor has provided us information, email support@fedoptic.com and we will delete it.

10. International Users

The Service is operated from the United States. If you access it from outside the United States, your information will be transferred to, stored in, and processed in the United States.

We do not currently target users in the European Union. If you are an EU resident and use the Service anyway, we will honor the rights described above and respond to written requests sent to support@fedoptic.com.

11. Changes

We may update this Privacy Policy. For material changes, we will email registered users at least 30 days in advance. Non-material clarifications (for example, fixing a typo or adding a new vendor to the table above) may take effect when posted and will be reflected in the "Last updated" date.

12. Company and Contact

The Service is provided by Bachoy LLC, a California limited liability company doing business as "FedOptic." Questions about this Privacy Policy: support@fedoptic.com.