Privacy · Updated November 12, 2026

We hold very little about you.

IRIS works without an account. The API, the MCP server and every tool on this site can be used without telling us who you are. This page lists what we do hold, in plain words.

What we collect

• Your email, if you subscribe. We send a confirmation first and add you only after you click it. With your address we keep where you signed up, when you confirmed, and the wording you agreed to.
• What you send us. Emails to our addresses, forms you fill in, and feedback sent by you or your AI agent through the feedback tool. A feedback report holds the text you wrote and a contact email only if you included one.
• Aggregate traffic. Page views counted without cookies and without a profile of you.
• Product events, without your words. When you open a brief or a source, copy a citation, save a finding or report a claim, we record the event name, the brief and claim IDs, the state shown (for example “source did not respond”) and a random ID kept in your browser. Never your notes, your email or anything you type. With Global Privacy Control or Do Not Track on, nothing is sent. Saved findings, notes and follow preferences stay in your browser.
• Short-lived technical logs. Requests are logged by our host to keep the service running, and your IP address is used in memory to limit abuse of the feedback endpoint. We do not link what you read to your email, your IP or any profile of you.

What we never do

• Sell or rent personal data, or share it for advertising.
• Buy, scrape or accept contact lists, including school directories.
• Knowingly collect data from anyone under 18. If you believe a minor has given us data, write to us and we will delete it.
• Feed what you send us into a model as instructions. Feedback is read by a person.

Who processes it for us

• Vercel hosts the site and counts page views.
• Resend stores subscriber emails and sends the daily edition.
• Supabase stores feedback reports.
• Zoho Mail receives email sent to our addresses.

These companies act on our instructions and may process data in the United States and other countries.

Data about companies and public figures

IRIS publishes information from public sources: SEC filings, companies’ own job boards and websites, and news and essays we link to. Filings can name company officers because the filing does. If something about you or your company is wrong or should not be listed, tell us and we will review it within two business days.

Your choices

• Unsubscribe with the link in every email. It takes effect at once.
• See, correct or delete what we hold about you: write to hello@iris-media.xyz. We answer within 30 days, usually much sooner.
• Depending on where you live (for example the EU, the UK, California or Colombia), the law may give you further rights, including the right to complain to your data protection authority.

How long we keep it

Subscriber data until you unsubscribe, then only the record that you must not be emailed. Feedback and correspondence for as long as they are useful to improve IRIS, or until you ask us to delete them.

Who we are

IRIS Media, Calle 19A #127-10, Bogotá, Colombia. Questions about this page: hello@iris-media.xyz. Security reports: see security.txt. If this page changes in a way that matters, we will say so here and in the daily edition.