Privacy Policy

rentseek.ing is an executive compensation analytics platform. We analyze public SEC filings and make compensation data accessible to shareholders, researchers, and the public.

We collect personal data only when you interact with features that require it — signing in, subscribing to updates, requesting access, or participating in shareholder campaigns. We do not sell your personal data to third parties.

Account authentication

When you sign in, we collect your email address via magic link authentication powered by Resend. This email is stored in our database to identify your account and manage your session.

Newsletter subscription

When you subscribe to our newsletter, we collect your email address. This is stored in our Contact and EmailSubscription database tables. We may send you drip email sequences with compensation insights and platform updates.

Analytics access requests

When you request access to advanced analytics features, we collect your email address, name, and company. This information is used to evaluate and grant access.

Shareholder activism participation

When you co-sign a shareholder campaign, we collect your email address, display name, and declared share count. Your display name and declared shares may be visible to other co-signers on the campaign page. See the Shareholder Activism section for details on how campaign data is used.

Automated data collection

When you visit rentseek.ing, we automatically collect:

• Usage analytics via PostHog — page views, feature usage, and interaction patterns. PostHog is self-hosted at us.posthog.com.
• Google Analytics & Google Ads — aggregate site traffic and conversion tracking for advertising campaigns.
• Meta (Facebook) Pixel — conversion tracking for advertising campaigns.
• Error reports via Sentry — stack traces, browser metadata, and request URLs when errors occur. These help us diagnose and fix bugs. No personally identifiable information is intentionally captured.

We use your personal data for the following purposes:

• Authentication — to sign you in and maintain your session.
• Communications — to send you newsletters, product updates, and shareholder campaign notifications you have opted into.
• Access management — to evaluate and grant access to premium features.
• Shareholder advocacy — to aggregate and deliver co-signer support to company boards on your behalf.
• Product improvement — to understand how people use the platform and improve the experience.
• Advertising measurement — to measure the effectiveness of our advertising campaigns.
• Error resolution — to identify and fix bugs.

We use the following types of cookies:

• Session cookies (essential) — required for authentication. These expire when you close your browser or after 30 days.
• Analytics cookies (PostHog) — used to understand site usage and improve the product. These track anonymous interaction patterns.
• Advertising cookies (Google Analytics, Google Ads, Meta Pixel) — used for conversion tracking and advertising measurement. These may track you across sites.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from signing in.

We use the following third-party services to process your data. Each operates under their own privacy policy and data processing agreements:

• Vercel — hosting and infrastructure. Processes request logs and serves the application.
• Neon — PostgreSQL database. Stores account data, subscriptions, and campaign participation.
• Resend — transactional and marketing email delivery. Processes email addresses for magic link authentication and newsletter delivery.
• PostHog — product analytics. Processes anonymized usage data.
• Sentry — error monitoring. Processes error reports and browser metadata.
• Google — analytics and advertising measurement via Google Analytics and Google Ads.
• Meta — advertising measurement via Facebook Pixel.

We do not sell your personal data to any third party.

• Account and contact data — retained until you request deletion.
• Authentication sessions — expire after 30 days of inactivity.
• Analytics data — retained per the data retention policies of PostHog, Google Analytics, and Meta.
• Error reports — retained for 90 days in Sentry, then automatically deleted.
• Campaign co-signatures — retained as long as the shareholder campaign is active, or until you withdraw your co-signature.

We send the following types of emails:

• Authentication — magic link sign-in emails (transactional, cannot be unsubscribed).
• Newsletter — compensation insights and platform updates.
• Campaign notifications — updates on shareholder campaigns you have co-signed.

Unsubscribing

All marketing and newsletter emails include a one-click unsubscribe link compliant with RFC 8058 (List-Unsubscribe-Post header). You can unsubscribe instantly by clicking the link in any email, or by visiting rentseek.ing/unsubscribe. Unsubscribe requests are processed immediately.

rentseek.ing enables shareholders to organize and deliver collective feedback to company boards. When you participate in a shareholder campaign:

• Your display name and declared shares may be visible to other co-signers on the campaign page.
• When a campaign is delivered to a company's board of directors, the delivery email may include co-signer names as part of the shareholder petition. Your email address is not shared with the company.
• You can withdraw your co-signature at any time, which will remove your name from future campaign communications.

By co-signing a campaign, you consent to your display name being included in communications sent to company board members on behalf of participating shareholders.

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with similar data protection laws, you have the following rights:

• Right of access (Article 15) — you can request a copy of all personal data we hold about you.
• Right to rectification (Article 16) — you can ask us to correct any inaccurate personal data.
• Right to erasure (Article 17) — you can request that we delete your personal data. We will comply unless we have a legal obligation to retain it.
• Right to data portability (Article 20) — you can request your data in a structured, machine-readable format.
• Right to object (Article 21) — you can object to processing of your personal data for direct marketing or other purposes based on legitimate interest.

To exercise any of these rights, email privacy@rentseek.ing with your request. We will respond within 30 days.

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption in transit (TLS) for all connections to rentseek.ing.
• Encryption at rest for database storage.
• Passwordless authentication via magic links (no passwords stored).
• Access controls limiting who can view personal data.

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to privacy@rentseek.ing.

We may update this privacy policy from time to time. Material changes will be communicated via email to registered users or by a prominent notice on the site. The “last updated” date at the top of this page reflects the most recent revision.

For privacy-related questions, data requests, or concerns, contact us at privacy@rentseek.ing.

For general inquiries, see our Terms of Service or email contact@rentseek.ing.