Privacy Policy

Last updated: April 13, 2026

Information We Collect

Account information: When you create an account, we collect your email address and an encrypted password via AWS Cognito. We do not store your password directly.

Payment information: When you subscribe to MFFAIS Membership, payment is processed by Stripe. We store your Stripe customer ID and subscription status but never see or store your credit card number, CVV, or billing address. Stripe's privacy policy governs payment data handling.

Usage data: We collect anonymous usage data via Google Analytics, including pages viewed, time on site, and general geographic region. This data is aggregated and cannot identify individual users.

User-generated content: Notes, questions, and discount profiles you create are stored in our database. Public content is visible to other users alongside your username.

Email subscriptions: If you subscribe to filing notifications for a company, we store your email address and the company you selected.

How We Use Your Data

We use your data to:

  • Provide and maintain your MFFAIS account
  • Process membership payments via Stripe
  • Send filing notification emails you have opted into
  • Moderate user-generated content for quality
  • Improve the platform based on aggregate usage patterns

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Third-Party Services

  • Stripe — payment processing (Stripe Privacy Policy)
  • AWS Cognito — authentication and account management
  • AWS Comprehend — automated content moderation
  • Google Analytics — anonymous usage analytics
  • Amazon CloudFront — content delivery
  • Amazon SES — transactional email delivery

Cookies

MFFAIS uses the following cookies:

  • id_token, access_token, refresh_token — httpOnly secure authentication cookies set when you log in. These are essential for account functionality and cannot be disabled.
  • Google Analytics cookies — anonymous usage tracking.

Your Rights

You have the right to:

  • Delete your account: Contact us and we will delete your account and all associated data.
  • Unsubscribe from emails: Every notification email includes an unsubscribe link.
  • Export your data: Contact us to request an export of your account data.
  • Cancel membership: Cancel anytime via the Stripe customer portal in your account menu.

Data Retention

Account data is retained as long as your account is active. If you request deletion, we will remove your data within 30 days. Anonymous usage analytics are retained indefinitely.

Contact

Privacy questions: privacy@mffais.com