Privacy Policy

1. Who is responsible

Han Radar (operated by an individual in the Republic of Korea) is responsible for your personal data (the data controller). Contact: support@hanradar.com. Payments are handled by our merchant of record, Polar (polar.sh), which processes your payment details under its own privacy policy.

2. What we collect

• Waitlist: your email address, which form you used and when.
• Account: your email address, sign-in times, your plan (Free or Pro) and whether alert emails are on.
• Watchlist: the companies you choose to follow.
• Alert log: which filings we emailed you about, when, and whether delivery succeeded.
• Product events: short named events such as a button click, joining the waitlist, signing in, changing alert settings or starting checkout, with a few fixed labels (for example which button). If you are signed in they are linked to your account. Known bots and our own test traffic are excluded.
• Anonymous visit statistics: when a page loads, your browser sends us one short page_view event: the page path (no query string), the language edition, any utm_ campaign labels in the link, the website you came from (host name only) and a random identifier. The identifier is a random number kept in your browser's local storage so we can count unique visitors; it is not a cookie, is not derived from you or your device, and is never combined with your email address. We do not store your IP address with it. If local storage is blocked, the identifier lives only until you close the page. Known bots are excluded. You can clear it at any time by clearing this site's data. We keep these events for 13 months, then delete or aggregate them.
• Abuse prevention: to rate-limit some forms, our server briefly keeps a salted one-way hash of your IP address in memory (the counting window is one minute). It is not written to our database or logs.
• Analytics cookies: if product analytics (PostHog) is enabled, it stores an identifier in a cookie and in your browser's local storage to count visits and page views.
• Billing: from Polar we receive your subscription status, plan, renewal dates and a customer reference — never your full card number.

We do not ask for, and do not want, your brokerage account, holdings or other financial information.

3. Why we use it

• To run your account and send the alerts and digests you asked for (performing our contract with you; for alert emails, your consent, which you can withdraw at any time).
• To tell waitlist members when the Service or founding seats open (your consent when joining).
• To keep the Service secure, prevent abuse and understand which features are used (our legitimate interest in running a reliable product).
• To keep billing and tax records through our merchant of record (legal obligation).

We do not sell or rent personal data, use it for advertising, or make automated decisions about you that have legal effects.

4. Who processes it for us

We use these service providers, each bound to process data only on our instructions or under their own privacy terms:

• Supabase — database and sign-in.
• Cloudflare — website hosting and delivery.
• Resend — sending email.
• Polar — checkout, payments, invoicing and tax (merchant of record).
• PostHog — product analytics, only if enabled.
• Anthropic — rewrites the English prose of public filings. Only public filing text is sent; no personal data about you.

These providers may process data in the United States, the European Union or other countries outside the one you live in. Where required, transfers rely on the providers' standard contractual safeguards.

5. How long we keep it

• Account, watchlist and alert settings: while your account exists; deleted within 30 days after you ask us to delete it.
• Waitlist email: until you ask to be removed, or 12 months after public launch, whichever comes first.
• Alert log and product events: 13 months, then deleted or aggregated so they no longer identify you.
• Billing and tax records: kept by Polar for as long as the law requires.
• Backups held by our providers roll over within about 30 days.

6. Your choices and rights

• Stop alert emails: every alert and digest email has a one-click unsubscribe link, and you can switch alerts off in your dashboard.
• Access, correction, deletion, objection or a copy of your data: email support@hanradar.com from the address on your account. We may ask you to confirm the request from that address. We aim to reply within 10 days.
• You can also complain to the data-protection authority where you live (in Korea, the Personal Information Protection Commission).

7. Security

Traffic is encrypted (HTTPS). Database access is limited by row-level security, and keys that can read all data stay on our servers. No system is perfectly secure; if a breach affects your data we will tell you and the relevant authorities as the law requires.

8. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

9. Changes

We will update this policy when what we collect changes. For material changes we will email account holders before they take effect. The date at the top shows the current version.