Legal

Privacy Policy

This policy explains how BankAnalysis handles personal data for the web app, Google sign-in, AI chat, the read-only ChatGPT app, and the MCP connector.

Effective date: May 25, 2026

Who we are

BankAnalysis, Inc., referred to in this policy as BankAnalysis, we, us, or our, provides bank research software for searching, comparing, and analyzing U.S. bank financial data, public filings, earnings-call transcripts, news, and AI-assisted research outputs.

Information we collect

We collect the following categories of information:

  • Account information, such as your email address, name, authentication provider, user identifier, account status, product access, and preferences.
  • Google sign-in information, if you choose to continue with Google, such as your Google account identifier, email address, name, and profile image if Google provides it.
  • Product content and activity, such as bank searches, selected banks, saved chats, prompts, AI responses, saved replies, feedback, exports, authenticated ChatGPT app requests, MCP connector requests, tool results, feature usage, and support requests.
  • Billing information, such as Stripe customer identifiers, subscription state, plan, invoices, and payment status. We do not store full payment card numbers.
  • Technical and security information, such as device and browser information, IP-derived metadata, request logs, cookies, analytics identifiers, error reports, and authentication events.

Google user data

BankAnalysis requests only basic Google sign-in information, such as your Google account identifier, email address, name, and profile image if available. BankAnalysis uses Google sign-in only to authenticate you, create or connect your BankAnalysis account, secure account access, and send service-related account notices. Your email address is used as your account identifier and sign-in contact. BankAnalysis does not request access to Gmail, Google Drive, Google Calendar, Contacts, or other Google Workspace content.

We do not sell Google user data, use it for advertising, use it to determine creditworthiness, or use it to train AI models. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We may share basic Google sign-in information with service providers that help us operate authentication, hosting, security, email, and support. We retain Google sign-in information as account information under the retention practices described below.

AI chat, ChatGPT app, and MCP connector data

BankAnalysis may process prompts, chats, selected bank context, tool results, feedback, and AI responses to provide, secure, troubleshoot, and improve BankAnalysis. These requests may be processed by AI infrastructure, search, and model providers that help us generate, stream, measure, and troubleshoot AI responses. We do not use Google sign-in data to train AI models.

If you connect BankAnalysis through ChatGPT or another MCP-compatible client, that client may send authenticated requests to BankAnalysis. We use those requests to verify your account, enforce product access, and return the BankAnalysis data or public bank data you asked the client to retrieve. The third-party client, including ChatGPT, may handle your conversations and tool calls under its own terms and privacy policy.

For ChatGPT app and MCP connector requests, we may keep operational records such as account identifiers, OAuth client identifiers, requested scopes, tool names, request status, rate-limit outcomes, timestamps, duration, and compact diagnostic summaries. We use these records to secure the connector, troubleshoot errors, enforce access, and monitor reliability. We do not return authentication tokens, passwords, or payment credentials to MCP clients.

The BankAnalysis MCP connector is read-only. It does not create, modify, delete, purchase, trade, submit, or approve information on your behalf. It uses account and product access information to authorize requests, then returns only the product data, public bank data, or generated research outputs needed to respond to the authenticated request.

Cookies and similar technologies

We and our service providers may use cookies, local storage, analytics identifiers, and similar technologies to operate BankAnalysis, keep you signed in, remember preferences, measure usage, detect abuse, debug errors, and improve reliability.

Some browsers offer "Do Not Track" or similar signals. BankAnalysis does not currently respond to Do Not Track signals. We do not sell personal data or use personal data for cross-context behavioral advertising.

How we use information

We use information to:

  • Provide, secure, personalize, and maintain BankAnalysis.
  • Authenticate users and manage account access.
  • Operate AI chat, reports, exports, dashboards, the MCP connector, and connected app features.
  • Process billing, subscriptions, credits, and account deletion.
  • Monitor reliability, debug errors, prevent abuse, and improve the product.
  • Respond to support requests and send service-related notices.
  • Comply with legal, tax, accounting, and security obligations.

How we share information

We share information only as needed to operate BankAnalysis, comply with law, or protect rights and security. Recipients may include:

  • Hosting, database, authentication, and infrastructure providers.
  • Payment processors and billing systems, including Stripe.
  • Analytics, observability, and error monitoring providers.
  • Email and support providers used for service communications.
  • AI infrastructure, search, and model providers used to process AI requests.
  • ChatGPT or another MCP-compatible client when you authorize that client to use BankAnalysis on your behalf.
  • Government authorities, courts, or other parties when required by law or necessary to protect BankAnalysis, users, or others.
  • A successor entity in connection with a merger, acquisition, financing, reorganization, or sale of assets.

We do not sell personal data.

Retention

We keep personal data for as long as needed for the purposes described in this policy, unless a longer period is required for legal, tax, accounting, billing, security, or dispute-resolution purposes. Generally:

  • Account information is kept while your account is active.
  • Chats, saved replies, preferences, feedback, and other product data are kept until you delete them or delete your account.
  • Billing and transaction records may be kept for up to seven years or longer if required by law.
  • Security logs, analytics records, and diagnostic data are typically kept for up to 24 months unless needed for security, abuse prevention, or legal reasons.
  • Deleted product data may remain in backups for up to 90 days before being overwritten, while logs are retained as described above unless needed longer for security, abuse prevention, or legal reasons.

Security

We use administrative, technical, and organizational safeguards designed to protect personal data. These safeguards include access controls, encrypted transport, provider security controls, monitoring, and limited internal access based on operational need. No online service can guarantee absolute security.

Your choices and controls

You can access or update certain account information in BankAnalysis, manage billing through the account page, and delete your account when eligible. Deleting your account permanently removes your chats, feedback, preferences, and other product data, while billing records may be retained for accounting, tax, and legal purposes.

You can also control cookies through your browser and contact us to request access, correction, deletion, or other privacy assistance at support@bankanalysis.ai.

U.S. state privacy rights

Depending on where you live, and where applicable law requires, you may have rights to request access to, correction of, deletion of, or a copy of personal data. You may submit privacy requests at support@bankanalysis.ai. We do not sell personal data. If applicable privacy laws require additional rights, notices, or appeal procedures, we will provide them.

Children

BankAnalysis is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

International access

BankAnalysis is operated from the United States and is intended primarily for users located in the United States. We do not intentionally market or offer BankAnalysis outside the United States. If you access BankAnalysis from outside the United States, you do so on your own initiative, and your information may be processed in the United States and other countries where our service providers operate.

Changes to this policy

We may update this policy from time to time. If changes materially affect how we use personal data, we will take reasonable steps to notify users, such as updating this page or providing an in-product notice.

Contact

Questions about this policy or BankAnalysis privacy practices can be sent to support@bankanalysis.ai.