Privacy
Every page here is open without an account. If you make one, it keeps your email, your first name if you give one, and the lists you save, so they follow you to another device. This page says what the website records, what an account keeps and for how long, what the desk records when you run it, and how to have any of it removed.
The short version
- Reading the site needs nothing from you. Every page is open without an account. Page views are counted by Cloudflare Web Analytics, which sets no cookie and keeps no personal data.
- An account is optional. It keeps your email address, your first name if you give one, and the lists you save: your watchlist, the names you follow, the pages you save, your saved screens and your own formulas. It also notes the country you signed up from and how you first found the site. It sets a sign-in cookie. Nothing else is collected.
- GreekSoup Premium and SuperAnalyst: if you ask SuperAnalyst a question, we keep the question and its answer for 90 days. If you pay for Premium, we keep the payment record for 8 years, as Indian tax law requires. Details below.
- The desk runs on your own computer and sends nothing about you anywhere. The whole list of places it reaches is on What it talks to.
- You can delete your account yourself, from My page, at any time. It is hidden at once and erased for good after 30 days; sign in again before then and everything comes back.
- Questions or removals: privacy@greeksoup.ai. A complaint about your data: our Grievance Officer, at the end of this page.
The website, greeksoup.ai
Reading without an account. A page view and a visit are counted by Cloudflare Web Analytics. The count sets no cookie, uses no fingerprint and stores no address; it tells us how many people read a page, not who. The pages are served by Cloudflare, which keeps ordinary request logs (the address a request came from, the page, the time) for its own operation and security, for a short time, under Cloudflare's privacy policy. We do not keep or read those logs. If you arrive by clicking a link in an AI assistant's answer (ChatGPT, Perplexity, Gemini, Claude, Copilot and the like), the page sends us one short note: which assistant, the page you landed on and the day, and we add the country your network is in. It goes at most once a day, sets no cookie and keeps no address or anything else that says who you are. The site also keeps its own count of visits: when a page opens and when you leave it, the page sends us its address, the site that linked you here, its number in your visit, how long it was on screen and which of the three themes (Blue, Steel or Light) it was shown in. When you switch theme, the page sends one more short note: the theme you left, the one you picked, the kind of page you were on and whether you were signed in. We count a visitor with a code made from your network address and browser that changes every day, so it cannot say who you are or follow you from one day to the next. It sets no cookie and keeps no address.
What it keeps in your browser. A few small things, on your own computer: the theme you picked, the watchlist, saved screens and formulas you build on the stock pages, a note that you once arrived here from your own desk (with the desk's port number), which lets a stock page offer to open the name in your desk, a note of how you first found the site (the site or campaign link that brought you, the first page you opened and the day), the day an AI assistant last sent you here, so that visit is counted once, and a number for the visit in the open tab, gone when the tab closes. Clearing your browser's site data removes all of them. Without an account, none of them leave your browser, apart from the theme, which goes with the visit count above.
What it loads from elsewhere. The typefaces come from Google Fonts, so your browser asks Google for the font files when a page opens. The analytics script comes from Cloudflare. Every other file on the site is served from greeksoup.ai itself.
Links out. The stock pages link to the filings they were built from, on SEC EDGAR and the other public sources named on each page. Those sites have their own privacy terms once you are on them.
If you make an account
Why it exists. To remember things for you across devices: the names you watch and follow, the pages you keep, your screens and formulas, and to send the daily email if you ask for it.
How you sign in. With Google, or with a link we email you. There is no password. With Google, we receive your email address, your first name as Google has it, and Google's account number for you, and nothing else from your Google account. An email link works once, for 15 minutes.
Your consent. Making an account is your consent to what the table below lists, for the reasons it gives. You can withdraw it at any time: turn the email off, remove a list, or delete the account.
What we keep, and for how long.
| What | Why | How long |
|---|---|---|
| Your email address | To sign you in and, if you ask, send the daily email | Until 30 days after you delete the account |
| Your first name: from Google if you sign in with Google, or as you type it when you sign in or on your account page. You can change it or leave it empty | To greet you by name in the emails we send you | Until 30 days after you delete the account |
| Google's account number for you, if you use Google | To recognise you when you sign in with Google | Until 30 days after you delete the account |
| Your watchlist, followed names, saved pages, saved screens and formulas | So they follow you to another device | Until you remove them, or 30 days after you delete the account |
| The country you signed up from (from your network address, which itself is not kept), whether you used Google or an email link, and how you first found the site: the site or campaign link that brought you, the first page you opened and the day | To see which countries and which links bring readers who make accounts | Until 30 days after you delete the account |
| A sign-in record per browser: when it started, when it was last used, and the browser's name (for example Chrome on Mac) | To keep you signed in, and to let you sign out on every device | 90 days after last use, or until you sign out |
| The days on which you used the site while signed in (the day only, not the pages or the time) | To count how many readers come back | 90 days, or until 30 days after you delete the account |
| A record of each daily email: the day and how many items | So one morning never sends twice | Until 30 days after you delete the account |
| Which welcome email you last had, and whether you stopped them | So none is sent twice, and none after you stop them | Until 30 days after you delete the account |
| Each sign-in link we email, and short counters of sign-in emails per address and per network address | To make each link work once, and to stop someone flooding an inbox | Up to two days |
The cookies. Signing in sets one cookie on api.greeksoup.ai. It holds a random sign-in number and nothing about you; we keep only a scrambled copy of it, so even our own database cannot sign anyone in. It goes when you sign out. Signing in with Google also sets a second cookie for ten minutes, which remembers the page you started from and checks that Google's answer belongs to your sign-in; it goes when the sign-in finishes. Reading the site without an account sets no cookie.
The daily email. Only if you follow a name and leave the email on. It lists what the names you follow filed or announced since the last one, from the same record the Feed page shows. Every email has a link that stops it, and My page has the switch.
The welcome emails. If you make an account and do not follow a company yet, we send up to four short emails explaining the site: on the day you join, and then on days 2, 5 and 10. They stop the day you follow a company, and each one has a link that stops them.
Who handles it for us.
| Who | What they do | Where |
|---|---|---|
| Cloudflare | Runs the account service and stores the account data | Cloudflare's network, stored in its Asia Pacific region |
| Amazon Web Services (SES) | Sends the sign-in and daily emails | Mumbai, India |
| Signs you in, only if you choose Google | ||
| Hostinger | Runs the server that keeps the nightly backup copy of the account data | Mumbai, India |
None of them may use your data for anything but this service. We do not sell, rent or share your data with anyone else, and we show no advertising.
Where it is stored. Cloudflare keeps the account data in its Asia Pacific region, which can be outside India, and Google signs you in from its own servers around the world. The emails and the nightly backup stay in Mumbai.
Who can see it. Only the founder, Shubham Borkar, can see account records, through a private page, to run the service. No one else at Shikshan Nivesh or Borkar Nexus can.
Deleting it. On My page, type your email and press Delete my account. You are signed out on every device and the emails stop at once. The account stays hidden for 30 days, in case you change your mind: sign in again with the same email and everything comes back as it was. After 30 days your email, your name, your lists and every record of the account are erased. If you want it erased at once, write to privacy@greeksoup.ai from the account's email.
Backups. A copy of the account data is taken every night, so a fault cannot lose it, and each copy is kept for 30 days on our server in Mumbai and on our own computer, then deleted. Cloudflare also keeps 30 days of history of the account database for the same reason. So once an account is erased, the last copies holding it are gone within a further 30 days. Copies are never used for anything but putting the service back after a fault.
Security. Sign-in links work once and expire in 15 minutes. No script on the page can read the sign-in cookie. Every request is checked on the server and can only reach your own data. The keys that run the service are kept in Cloudflare's encrypted store and never in the site's code. If your data were ever exposed, we would tell you and the authorities promptly.
GreekSoup Premium and SuperAnalyst
What we keep, and for how long.
| What | Why | How long |
|---|---|---|
| Each question you ask SuperAnalyst and its answer | To answer you, and to check answers for mistakes | 90 days, or until 30 days after you delete the account |
| The date of each question, the company, how deep it went and what the answer cost us to make | To keep each member's monthly use, and for our accounts | Until 30 days after you delete the account, then kept without your email |
| Your Premium plan, its start and end, and each payment: amount, date and the payment company's reference | To give you Premium, and for our tax records | 8 years, as Indian tax law requires |
| For a payment through Cashfree: the name and state you give for the invoice | Your GST invoice | 8 years, with the invoice |
| Your GST invoice: name, email, country and state, amounts and tax | Indian tax law | 8 years |
Your mobile number for a Cashfree payment goes straight to Cashfree and is not kept by us. Your card or UPI details go only to Stripe or Cashfree; we never see them.
If you pay for the Alpha with AI newsletter, the email you pay with is used to switch on GreekSoup Premium.
Who handles it for us.
| Who | What they do | Where |
|---|---|---|
| AI model providers we contract with | Write SuperAnalyst's answers from your question and the company's record. They receive the question, never your name or email | United States |
| Stripe | Card payments, renewals and receipts | Stripe's network, including India and the United States |
| Cashfree Payments | UPI, Indian card and net banking payments | India |
| Supabase, for Shikshan Nivesh's invoicing | Issues and stores the GST invoices of Borkar Nexus Private Limited | Supabase's cloud |
None of them may use your data for anything but this service.
The desk, on your computer
What it keeps. Your book, your lists, your notes, your keys and your settings live in files inside the desk folder on your own computer. They are yours; the desk reads them and never sends them. Your files names each one.
What it sends, and to whom. Only what you connected: your broker with the keys you gave it, your data provider if you added a key, your AI if you chose one, and the public sources every screen reads. The desk asks GitHub once a day whether a newer version exists, a request that carries no identifier, and it asks greeksoup.ai for the plugin list when you open the Plugins tab and for the list of names the website covers when you open a ticker page. Neither request says who you are. The full list, with what each request carries, is on What it talks to; the Security page says what the desk does about each thing that can go wrong.
What it never sends. Nothing about you, your book, your lists or your keys goes anywhere. No telemetry, no analytics, no crash reporting, no account.
Tell us: the one thing you can send
The desk's Tell us page gathers what a report needs (the desk's version, your operating system, which keys are set by name and never by value, the last lines of the desk's log, which sources it could reach, and what you typed) and shows you all of it before anything leaves. Nothing is sent until you press Send.
When you press Send, the report goes to our support address and is filed as a public issue on the GreekSoup repository on GitHub, so that the next reader with the same problem finds the answer by search. Do not put anything in a report you would not want on a public page; the desk keeps keys out of it, and you can edit every line before it goes. If you would rather not post publicly, the same page can open your mail app with the report addressed to privacy@greeksoup.ai instead, and that mail stays between you and us.
The reply we write on the issue comes back into your desk on the same page. To make it come back, the desk asks GitHub for that one issue, by number, when you open the page.
Children
greeksoup is for people aged 18 and over. We do not knowingly keep an account for anyone younger, and if we learn of one we delete it.
Your rights
You can see, correct, export or delete what an account holds. Most of it is on My page already; for anything else, write to privacy@greeksoup.ai from the account's email. If you sent a report from the desk and want it removed or edited, send the issue number. The page-view count cannot be traced back to you, so there is nothing there to remove. You can also complain to the data protection authority where you live; in India that is the Data Protection Board of India. You can also name someone to use these rights for you if you die or cannot act yourself: write to the Grievance Officer from the account's email with their name and email.
Grievance Officer. Shubham Borkar, privacy@greeksoup.ai. We settle a complaint within 30 days.
Who we are
GreekSoup is made by Shikshan Nivesh, a brand of Borkar Nexus Private Limited, Gokul Apartment, Wada Road 7B, Rajgurunagar, Pune 410505, Maharashtra, India. Borkar Nexus Private Limited decides how account data is used and is responsible for it. The desk is open source, and its code can be checked line by line in the repository.
Changes to this page
When what the site, an account or the desk records changes, this page changes with it. This page was last revised on 16 October 2026, when paid subscribers of the Alpha with AI newsletter began to get Premium by the email they pay with. On 15 October 2026, when GreekSoup Premium went on sale, it said what SuperAnalyst and payments keep, for how long, and who handles them. Before that, on 11 October 2026, it named the Grievance Officer and said where account data is stored and who can see it.