Privacy policy

Policy updated October 18, 2026.

The data needed for a request

The application processes the arguments your assistant sends to a selected tool, such as a company identifier, filing accession, date range, or financial concept. It does not request conversation history, user files, account profiles, passwords, or API keys. Avoid including private or sensitive information in tool arguments.

The application creates no user accounts or profiles and does not log tool payloads or conversations. Tool arguments are processed to answer the request rather than retained as a user record. The server makes no LLM calls.

Operational data and retention

• Rate protection: client IP addresses are used in volatile, in-memory rate counters for up to one hour, followed by removal on the next 30-second cleanup. They are not used to build profiles.
• Aggregate counters: aggregate operational counts are held in process memory and reset when the process restarts.
• Application logs: the application writes only HTTP method, a fixed route label without query strings, response status, and duration to standard output. It does not include client IP addresses, tool arguments, or conversations in these logs. The operator must rotate and remove runtime logs within seven days.
• Public-data cache: only public SEC responses are cached, with expiry within 24 hours, including archive responses. Expired entries are removed on the next 30-second cleanup. The cache is not a store of user queries or conversations.

Who receives information

The SEC receives the service’s contact and User-Agent identification, the server’s IP address, and requests for SEC resources. We do not forward your client IP address or conversation to the SEC. The requested resource can identify the company, filing, or concept being retrieved.

The hosting provider processes network traffic to operate the service and may retain infrastructure or security logs under the operator’s configured retention. The supplied nginx configuration disables access logs; provider-level logging is separate.

Your assistant provider handles your conversation and tool inputs and outputs under its own policy and settings. This service’s policy does not control that provider’s retention.

Support email is handled by the operator and its email provider outside this application. If you contact us, your reply address and message are used to handle your request. Ask support about the mailbox’s applicable retention or deletion options.

Your choices and deletion requests

You can stop using the service or remove the connection in your assistant’s settings. Contact support@inkforge.dev for privacy questions or deletion requests. There is no application profile or conversation history to delete. Transient rate counters expire automatically; requests concerning retained operational or support records will be assessed against what the operator actually holds. Public SEC records remain available from the SEC.

This website

These pages contain no JavaScript, trackers, analytics services, external fonts, or advertising. The application does not set cookies for user tracking. Ordinary HTTP requests still pass through the service’s hosting infrastructure.

Contact and scope

Privacy contact: support@inkforge.dev. This policy covers this independent research service and its public pages. It does not replace the SEC’s, your assistant provider’s, the hosting provider’s, or the email provider’s own policies.