PRIVACY POLICY

Vector Ridge Ltd. ("Vector Ridge", "we", "us" or "our") respects your privacy rights and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our Website, subscribe to quantitative research, model publications or educational content, or interact with us in any way (collectively the "Services").

By using our Website or Services, you agree to the practices described in this Privacy Policy. We may update this policy from time to time — continued use after changes means you accept the new version.

1. Information We Collect

A. Information You Provide to Us

• Name, email address, phone number
• Billing address and payment details — we only ever see the last 4 digits of your card; full card data is handled by our payment processor
• Username, password, and account information
• Any information you voluntarily give us (e.g. when contacting support or filling forms)

B. Information Collected Automatically

• IP address, browser type, device information
• Pages visited, time spent, clicks, and interactions with our emails
• Non-precise location data (from IP address)
• Product-usage analytics while signed in — which models/tabs you open, session frequency and recency, watchlist size, and upgrade interactions — recorded to your account on the basis of our legitimate interest in improving the Services and prioritising support. Recorded via our EU-hosted product-analytics provider (PostHog); this does not place advertising or cross-site tracking identifiers on your device.

C. Information from Third Parties

We may receive information from payment processors, advertising partners, or your employer (if you have an institutional subscription).

2. How We Use Your Information

We use your personal information to:

• Provide, maintain and improve our Services (including delivering model research and service updates)
• Process payments and manage your subscription
• Communicate with you (account updates, support, newsletters)
• Personalise your experience and send relevant offers
• Analyse usage and improve our Website
• Protect the security of our systems and prevent fraud
• Comply with legal obligations

3. Cookies and Tracking

We use cookies and similar technologies to run the Website, keep you signed in, remember your preferences, understand how the site is used and measure advertising campaigns. They fall into the following categories:

Strictly Necessary Cookies

Required for the Website and your account to function — for example login sessions, security, and remembering your cookie choice. These cannot be switched off.

Analytics and Advertising-Measurement Cookies

These help us measure traffic, attribute campaigns and improve the site. The providers and technologies currently configured are:

• Google Analytics 4 (measurement ID G-BNM14Z8SQ7) — measures page views and site usage. Google may set cookies and process data in the United States. See Google's Privacy Policy; you can also install the Google Analytics Opt-out Browser Add-on.
• Google Ads attribution and Consent Mode — campaign parameters and Google click identifiers such as GCLID, GBRAID and WBRAID may be retained for campaign attribution. Google Consent Mode communicates your analytics- and advertising-storage choices to Google tags. See Google's advertising technologies policy.
• Meta Pixel — measures page views and, for an eligible server-confirmed active trial, may record a Lead event after advertising consent is granted. See Meta's Privacy Policy.
• X Pixel — measures site activity and, for an eligible server-confirmed active trial, may record a trial conversion after advertising consent is granted. See X's Privacy Policy.
• Whop Pixel — links visits on public sales and checkout pages with an eligible server-confirmed trial on the trial-confirmation page after advertising consent is granted. Browser and server events use the same event identifier so Whop can deduplicate them. See Whop's Privacy Policy.
• Cloudflare Web Analytics — privacy-first, cookieless traffic measurement.
• PostHog — product-usage analytics for signed-in users (which models and tabs you open, session frequency and recency), hosted in the European Union (eu.posthog.com) and loaded only after you accept analytics cookies. See PostHog’s Privacy Policy.

Meta, X and Whop advertising scripts activate only after the site's advertising-consent state is granted. In regions where the consent banner is shown, that requires selecting Accept. Whop measurement is used for consent-gated public checkout and trial-confirmation attribution.

Your Cookie Choices

We use Google Consent Mode. If you visit from the EU, EEA, UK or Switzerland, analytics and advertising storage are denied until the cookie banner lets you Accept or Reject those optional technologies. Visitors outside the configured banner regions currently have analytics and advertising measurement enabled by default. In banner regions, clearing this site's cookies or site data reopens the choice; browser cookie and tracking controls remain available in all regions.

4. Sharing Your Information

We do not sell your personal information for money. We use the consent-managed analytics and advertising-measurement providers disclosed above.

We may share it only with:

• Trusted service providers (processors) who are contractually required to protect your data and process it only on our instructions
• Affiliates or successors in the event of a merger, acquisition or sale of assets
• Legal authorities when required by law or to protect our rights

The main third-party processors we rely on are:

• Whop — payments, subscription management, and consent-managed checkout and eligible-trial attribution
• Supabase — account authentication and database
• Cloudflare — website hosting, security, and analytics
• Google Analytics — website usage analytics
• Google Ads — campaign attribution and advertising measurement
• Meta Platforms — consent-managed page-view and eligible-trial measurement
• X Corp. — consent-managed site and eligible-trial measurement
• smtp2go — transactional and account emails
• FormSubmit — contact-form delivery
• PostHog — product-usage analytics (EU-hosted, consent-gated)

Your payment card details are handled directly by our payment processor — we never see or store full card numbers.

5. Data Storage and International Transfers

Vector Ridge Ltd. is incorporated in the Cayman Islands. The third-party providers listed above process data in various locations, including the United States. Where we transfer the personal data of EU/EEA, UK or Swiss users outside their home region, we rely on appropriate safeguards — such as the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework — so your data continues to receive GDPR-level protection.

6. Data Retention

We keep your information only as long as necessary to provide the Services, comply with law, or resolve disputes. When you cancel your subscription, we delete or anonymise your data within a reasonable time (subject to legal requirements).

7. Your Rights

You have the right to:

• Access, correct or delete your personal information
• Object to or restrict certain processing
• Withdraw consent (where applicable)
• Receive your data in a portable format

To exercise any of these rights, email support@vector-ridge.com. We will respond within 30 days.

8. GDPR — Your Rights Under EU/EEA/UK Law

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access — You may request a copy of the personal data we hold about you.
• Right to Rectification — You may request correction of inaccurate or incomplete data.
• Right to Erasure — You may request deletion of your personal data, subject to legal retention obligations.
• Right to Restrict Processing — You may request that we limit how we use your data.
• Right to Data Portability — You may request your data in a structured, machine-readable format.
• Right to Object — You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Our legal basis for processing your data includes: performance of a contract (providing our Services), legitimate interests (improving our Services, preventing fraud), compliance with legal obligations, and consent (where applicable, such as marketing emails).

To exercise any of these rights, contact us at support@vector-ridge.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. CCPA — Your Rights Under California Law

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with the following rights:

• Right to Know — You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete — You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct — You may request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing — You have the right to opt out of the sale or sharing of personal information. Vector Ridge does not sell personal information for money. We use the consent-managed advertising-measurement providers described in Section 3; depending on applicable law, some disclosures to those providers may be treated as sharing for cross-context behavioural advertising.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.

In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email, IP address), commercial information (subscription and transaction history), internet activity (browsing behaviour on our site), and geolocation data (non-precise, derived from IP address). This information is collected for the business purposes described in Section 2 of this policy.

To request an opt-out of sale or sharing, or to exercise another California privacy right, use the contact method below. We do not use or disclose sensitive personal information for purposes other than those permitted under CCPA/CPRA.

To submit a request, email support@vector-ridge.com with the subject line "CCPA Request." We will verify your identity and respond within 45 days. You may also designate an authorised agent to submit a request on your behalf.

10. Security

We use industry-standard technical and organisational measures to protect your data. However, no system is 100% secure — you use our Services at your own risk. Never share your password.

11. Children

Our Services are not intended for anyone under 18. We do not knowingly collect data from children.

12. Third-Party Links

Our Website may contain links to external sites. We are not responsible for their privacy practices.

13. Contact Us

For any questions about this Privacy Policy or your data, please contact us at support@vector-ridge.com.

Vector Ridge Ltd. — Postal address
447 Broadway
2nd FL #243
New York, NY 10013

Registered office
Intershore Consult (Cayman) Ltd.
Suite 303, George Town Financial Center
90 Fort Street, PO Box 2002
George Town, Grand Cayman KY1-1104
Cayman Islands