Privacy Policy

Last updated 19 April 2026

The Risk Agent ("we", "us") is operated by Feltan Associates Pte Ltd, a private research and intelligence company registered in Singapore (UEN 202521028R). This policy explains what personal data we process when you visit the site, buy a report, or contact us.

What we collect

  • Account and purchase data. Email address, purchase history, payment status. Payment details themselves are processed by Stripe — we never see or store card numbers.
  • Report download tokens. Expiring URLs tied to a specific buyer so purchased reports stay private.
  • Technical data. IP address, browser, device type, pages viewed. Used for security and aggregate analytics only.
  • Support correspondence. Emails you send us and our replies.

Why we process it

  • To deliver the product you paid for.
  • To send you the report download link and receipt.
  • To prevent fraud and abuse of the download tokens.
  • To comply with Singapore tax, accounting and consumer-protection law.
  • To improve the site (aggregate analytics only, no individual profiling).

Lawful bases (EU/UK buyers)

For customers in the EU or UK: we rely on contract (to deliver the report), legal obligation (to meet tax and record-keeping duties), and legitimate interest (to run and protect the site). We only rely on consent where the law requires it — for example, non-essential cookies.

Who we share data with

  • Stripe — payment processing.
  • Supabase — our database and auth backend (EU-region where chosen for customers).
  • Resend — transactional email delivery.
  • Vercel — web hosting.
  • Anthropic (Claude) — report drafting. No personally-identifying data is sent to the model beyond the report brief you submit.

We do not sell personal data. We do not share it with advertisers. We do not transfer it outside our processor chain except where ordered by law.

Retention

Purchase records: 7 years (Singapore tax and accounting retention). Support emails: 2 years. Analytics logs: 24 months rolling.

Your rights

You can request access, correction, deletion, or export of your personal data. Write to privacy@theriskagent.com. We respond inside 30 days.

Cookies

See the cookies policy.