Privacy Policy

What we collect.Your work email, name, company and role; the ticker, peers and markets you choose; your orders and subscription status; and basic usage logs. Payments are processed by Stripe, which receives your card details directly — we keep only Stripe's customer and payment identifiers.

Why. To deliver the packs and monthly updates you buy, bill you, send service emails (through Resend), prevent abuse and meet legal obligations.

Processors.Supabase (database, United States), Vercel (hosting), Stripe (payments), Resend (email). We don't sell customer data.

What we list.Publicly available professional information about people in investment, broking and media roles: name, firm, job title, business email or phone, links to public professional profiles, and for creators, their channel and its published business contact. We do not list home addresses, personal phone numbers, or sensitive information of any kind (including the special categories under GDPR, “special care-required personal information” under Japan's APPI, or “sensitive information” under Korea's PIPA).

Where it comes from.SEC filings (13F, 13D/13G, Form ADV); licensed-manager registers published by regulators and industry associations; firms' own websites, press releases and conference programmes; and public platform pages. We do not buy or resell contact data from data vendors. Where we infer a work address from a firm's published address pattern, we label it “inferred”.

Labels. Every contact carries one label — confirmed (published by the person or firm; we store the source page), inferred (follows a verified pattern at that domain), or firm-level (no named person).

Purpose.To let a listed company's investor relations team identify and make professional, business-to-business contact with investors and intermediaries relevant to its securities.

Recipients. Customers who buy a pack for that market. Customers are contractually barred from reselling or republishing pack contents.

Retention. Listings are refreshed monthly; contacts that bounce or can no longer be sourced are removed. When you ask to be removed we delete your listing and keep only the minimum needed to stop you being added back (a suppression record).

Legal basis (EEA/UK). Legitimate interests in facilitating professional investor relations, balanced against your interests; you can object at any time. [COUNSEL: confirm LIA is documented; Art. 14 GDPR notice timing for data not obtained from the data subject]

For listed people in Japan, the purposes of use above are published here as our public announcement of purpose of use (APPI Art. 21). We acquire information only from publicly available sources and do not acquire special care-required personal information.

Providing a pack to a customer is a provision of personal data to a third party. We stop providing your personal data to customers on request (opt-out), and handle requests for disclosure, correction, addition, deletion, suspension of use and suspension of provision to third parties made through our data request form.

[COUNSEL: APPI Art. 27(1) requires prior consent for third-party provision unless an opt-out notification has been filed with the Personal Information Protection Commission under Art. 27(2). We have NOT filed one. Decide whether a filing is required before selling Japan packs containing named individuals, or whether Japan packs should be limited to firm-level contacts until then.]

Our data is stored in the United States. [COUNSEL: Art. 28 cross-border transfer: confirm required information about the US data protection regime and our safeguards, and whether customer-side transfers need disclosure.]

Personal information handling contact (Japan): privacy@irster.com. [COUNSEL: APPI Art. 32 items: business name, address, representative's name.]

For listed people in Korea, we process only professional information that the person or their employer has made public, for the purpose described above. On request we tell you the source of your information, the purpose of processing, and that you may request suspension of processing (PIPA Art. 20).

You may request access to, correction or deletion of, or suspension of processing of your personal information through our data request form. [COUNSEL: PIPA response deadline — Enforcement Decree specifies 10 days; confirm and state it.]

[COUNSEL: PIPA Art. 15/17: collection and third-party provision generally require consent. Confirm whether processing publicly disclosed professional contact details without consent is permissible here (scope of the “publicly disclosed information” reasoning in Korean case law and PIPC guidance), and whether Korea packs should be limited to firm-level contacts until confirmed. Also confirm Art. 20 proactive notification thresholds, the Art. 28-8 overseas-transfer basis (US storage), and whether a domestic representative (Art. 31-2) is required.]

Anyone listed can ask us to remove, correct or show their details at irster.com/data. A removal applies to every pack, including monthly updates already subscribed to. Customers can access, correct or delete their account data by emailing privacy@irster.com. California residents have the rights described in the CCPA/CPRA; we do not sell or share personal information for cross-context behavioural advertising. [COUNSEL: confirm CCPA applicability thresholds and whether selling packs counts as a “sale” requiring a Do Not Sell link.]

Data is encrypted in transit and at rest with our providers. Pack data is readable only by our servers and the customer who bought it; access within IRster is limited to staff who need it.

We will post changes here and, for material changes, notify customers by email. Questions: privacy@irster.com. Videoster Inc. [COUNSEL: registered address]