Privacy Policy

Last updated: October 13, 2026

This policy explains what information Ben (twobens.com, operated by James D. Scurlock) collects, how it is used, and the choices you have. Ben collects as little as it needs to run a subscription service.

Information we collect

Subscription details: your name and email address, and the plan you chose. Payments are handled by Stripe, which receives your card details directly; we see only limited information such as the last four digits, expiry date and billing country.
Sign-in information: when you sign in, we create a random sign-in token that is stored on your device and on our systems so you stay signed in. We do not use passwords.
Your use of Ben: the tickers and company names you look up. If a company is not yet covered, your request is recorded with your email address so we can consider adding it.
Portfolio: if you use the Portfolio feature, your holdings (from a positions file you choose or holdings you type in) are read and kept only on your device. Ben's servers receive only the ticker symbols, to look up their values, and do not store them. Signing out removes the portfolio from the device.
Notifications: if you allow push notifications, your device's notification address is stored by our notification provider so we can send alerts and the daily quote.
Emails you send us: the content of any message you send.
Technical information: our hosting and email providers keep standard logs (such as IP address, browser type and the time of a request, and whether an email was delivered) for security and reliability. Ben does not use advertising or analytics cookies, and does not track you across other websites.

How we use it

To provide the Service: signing you in, showing lists and lookups, and sending the weekly lists, alerts, notifications and renewal notices you signed up for.
To manage subscriptions, billing, cancellations and support.
To decide which companies to add, based on lookup requests.
To protect the Service and comply with legal obligations.

We do not sell or rent your personal information, and we do not share it for advertising.

Service providers

We use these providers to run Ben; each handles your information only to provide its service to us:

Google (Google Workspace / Google Sheets and Apps Script): stores the subscriber list and runs Ben's back end.
Netlify: hosts the website and app.
Resend: sends Ben's emails.
Stripe: processes payments and manages subscriptions.
Porkbun: domain and email hosting for twobens.com.
OneSignal: delivers push notifications to devices where you have turned them on. It receives a coded identifier made from your email address, not the address itself.

We may also disclose information if required by law or to protect our rights, or to a successor if the Service is sold or transferred, in which case this policy will continue to apply.

How long we keep it

We keep a former subscriber's name and email address for 2 years after their subscription ends, so we can answer questions, handle refunds or payment disputes, and restore access if they return; after that we delete it. Payment and billing records are kept by Stripe for as long as tax and accounting laws require. Lookup requests are kept for 12 months; after that we delete the email address and keep only the company or ticker requested. Sign-in tokens expire 60 days after you sign in and are then deleted.

Your choices and rights

You can unsubscribe from Ben's emails by replying to any of them or cancelling your subscription; renewal and billing notices are still sent while a subscription is active.
You can turn off push notifications in your device settings.
You can ask us to access, correct or delete your personal information, or for a copy of it, by emailing james@twobens.com. We will respond within the time required by applicable law. Depending on where you live (for example, California or the European Economic Area), you may have additional rights, and we will honor them as required.

Security

The site uses encrypted connections (HTTPS), sign-in links expire after 20 minutes and work only once, and access to subscriber data is limited to the operator of Ben. No method of transmission or storage is completely secure.

Children

Ben is not intended for anyone under 18, and we do not knowingly collect information from children.

International users

Ben is operated from the United States, and information is processed in the United States and wherever our providers operate.

Changes

If we make material changes to this policy, we will notify subscribers by email before they take effect.

Contact

James D. Scurlock
1614 Diana Drive, Winter Park, FL 32789
james@twobens.com