# Privacy Notice | SGG Research Source: https://sggresearch.com/privacy [Skip to content](https://sggresearch.com/privacy#legal-content) SGG Research / Legal # Privacy Notice How SGG Research handles account, technical and research-source information. Effective 30 September 2026 Need help? [Contact our support team](https://sggresearch.com/terms#contact) ## 1. Who is responsible DREAVERR Digital Solutions LLP, trading as SGG Research, is responsible for personal information processed to operate this website, data analytics and research service, and customer accounts. Our address is 1103 - 11871 Horseshoe Way, Richmond, British Columbia, Canada V7A 5H5. For privacy questions or requests, write to [contact@sggresearch.com](mailto:contact@sggresearch.com?subject=SGG%20Research%20privacy), marked for the privacy contact. This notice covers visitors, customer representatives, people contacting us and professionals whose publicly recorded earnings-call participation appears in our research inputs. Payment providers describe their own processing separately. ## 2. Information we handle - Account and contact information: name, business email, organisation information you provide, support correspondence and subscription status. - Access and security information: password hashes, hashed session and API-key credentials, key labels and prefixes, expiry and revocation dates, and account-access events. Passwords are not stored in plain text; newly created API keys are displayed once. - Optional Google sign-in: your Google account identifier, verified email address and profile name, when you choose this login method. We do not request access to your Google email, files or contacts. - Technical information: IP addresses used to deliver requests and prevent abuse, request identifiers, requested routes, response status, timing, quota counters and operational error records. Infrastructure providers may keep additional connection logs. - Purchase information: the product, billing period, price, payment or cancellation status, and transaction references supplied by a payment provider or through correspondence. Full card numbers and card security codes are handled by the payment provider, not our factor API. - Licensing information: the licensed entity's legal name, the accepted terms version, declared AUM to the nearest USD 1 million, valuation dates, calculation basis and proportionate supporting evidence you provide for licence eligibility. We do not require client-level holdings for routine licence confirmation. - Research-source information: professional names, affiliations, speaker roles, company identifiers, call dates, participation records and contributions, including relevant quotations or excerpts and their source attribution. These observations support company-level research factors and the network visualisations on our site. Information comes from you, your organisation, use of our service, service providers and earnings-call source records. The public research package can be downloaded without providing an email address or creating an account. A download still involves the ordinary technical information needed to serve and secure a web request. Research-source information comes from our own observations and research records, publicly accessible company disclosures and earnings-call materials, and structured datasets supplied by data providers. Collection and preparation may involve manual review, semi-automated extraction or automated ingestion and processing. The professionals concerned may not have supplied their information directly to SGG Research. ## 3. Why we use it We use account, subscription and licensing information to provide access, authenticate customers, verify licence eligibility, deliver data and answer support requests. We use technical and security information to enforce request limits, investigate errors and protect the service. Purchase records support billing, accounting and the handling of cancellations or disputes. Professional participation information is used to create participant lists, attribute relevant contributions and quotations to their recorded speakers and calls, normalise recurring identities and analyse earnings-call patterns. It supports research datasets and displays of connections between companies and external speakers. We do not use the service to make employment, credit or other legally significant decisions about those individuals. Where the GDPR or UK GDPR applies, our bases are performance of a contract or steps requested before a contract; legitimate interests in operating a business research service, communicating with business representatives and maintaining security; and compliance with legal obligations. Research on publicly recorded professional activity relies on our legitimate interest in producing and explaining company-level financial research, subject to the rights and interests of the people concerned. Where consent is required, we obtain it and allow it to be withdrawn. Under other applicable privacy laws, we rely on the consent or exceptions those laws require. ## 4. Who receives information Hosting, database and communications providers process information needed to operate the service. Our application and database infrastructure uses Railway. Personnel and service providers receive access according to their operational responsibilities. Professional names and participation links shown in a public network view are visible to visitors to that view. Where our public research includes attributed excerpts, the associated professional names, roles and source references may also be visible. For purchases made through Paddle, Paddle acts as merchant of record and handles transaction, tax, fraud-prevention and payment-support information under its own [Privacy Notice](https://www.paddle.com/legal/privacy). We receive the information needed to provide and administer your access. Contact Paddle directly about the payment information it controls. We may also disclose relevant information to professional advisers or authorities where necessary for legal obligations or claims, or in a business transfer subject to appropriate protections. We do not sell customer contact information or share it with advertising networks for targeted advertising. ## 5. Cookies and browser storage The customer area uses a first-party cookie named sgg_session to keep you signed in. It is set after a successful login, expires after 12 hours and is cleared when you log out. It is used for authentication, not advertising. Blocking it prevents account login, but does not prevent access to the public papers and legal pages. Checkout uses an essential sgg_checkout cookie for up to two hours. Google sign-in uses sgg_oauth for up to ten minutes and sgg_registration for up to twenty minutes while registration awaits payment. These cookies protect the login and checkout flow and are not used for advertising. The current SGG Research site does not load advertising trackers or visitor-analytics cookies. Its wordmark fonts are hosted locally. If you follow an external link or open a payment provider's checkout or portal, that provider's privacy and cookie information applies to its service. We will update this notice and seek consent where required before introducing optional tracking. A cookie banner asks whether you accept optional cookies. Your choice is stored in your browser's local storage under sgg_consent and is not sent to us. No optional cookies are in use at present; your choice applies if that changes. You can change it at any time through "Cookie settings" in the footer of every page. We count how often the public research packages are downloaded. The counter records only the day, the package and the number of downloads, separated into browsers and automated clients. It does not store IP addresses, user agents or any other visitor data. ## 6. How long information is kept Account information is retained while access is active and afterwards only as needed for support, security, legal claims or required business records. Cancelling a subscription does not itself delete the account or records needed to document the transaction. You can request account deletion through our privacy contact. Session credentials stop working after 12 hours; unused activation links expire after 48 hours. Expiry prevents use and is not a statement that every associated database record has already been deleted. Temporary rate-limit records are periodically removed after their expiry. Account-access records, support messages and infrastructure logs have retention periods determined by their operational, security and legal purpose. Customer-visible API request details are retained for 180 days and then removed by scheduled maintenance. An unpaid registration is provisional: its contact details and credential hash are removed after confirmed checkout cancellation, or following the two-hour expiry once the payment provider confirms that no payment completed. Provider outages can delay that check. Payment providers retain their own transaction records under their own policies. Historical research observations and publication records may be retained to reproduce a study, identify corrections and verify data versions. Requests concerning identifiable professional information are assessed individually, including whether correction, removal or a restriction is appropriate. Information subject to legal retention or a dispute may need to be preserved for longer; deletion from backups follows their retention cycle. ## 7. Security and international processing We use access controls, credential hashing, encrypted connections on the hosted service and request limits to protect information. Credentials are excluded from normal application logging. No system can eliminate every security risk; notify us promptly if you believe an account or API key is compromised. We operate from Canada and use infrastructure and payment providers that may process information in other countries. Applicable safeguards can include an adequacy decision or contractual safeguards for international transfers. Contact us for information about the providers and safeguards relevant to your account. We do not represent that all information remains exclusively in the EU or in one country. ## 8. Your choices and rights Depending on applicable law, you may request access to your information, correction, deletion, restriction or portability; object to processing based on legitimate interests; or withdraw consent for processing that relies on it. These rights may be subject to legal exceptions. Withdrawing consent does not change the lawfulness of earlier processing. Send requests to [contact@sggresearch.com](mailto:contact@sggresearch.com?subject=SGG%20Research%20privacy%20request). Please identify the account or professional participation record concerned, without sending a password, API key or full card number. We may request proportionate information to verify your identity. We respond within the period required by applicable law and explain any permitted extension. You may complain to the privacy authority responsible for your jurisdiction, including the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Privacy Commissioner of Canada, or your local EEA or UK authority where applicable. Contacting us first is helpful but not a condition of that right. ## 9. Changes and contact We update this notice when our processing changes. The effective date identifies this edition. We will communicate material changes to affected account holders where required. The service is designed for professional users and is not directed at children. Privacy contact: [contact@sggresearch.com](mailto:contact@sggresearch.com?subject=SGG%20Research%20privacy), DREAVERR Digital Solutions LLP, trading as SGG Research, 1103 - 11871 Horseshoe Way, Richmond, British Columbia, Canada V7A 5H5.