Privacy Policy

• Account information — your email address, a securely hashed password, and an optional display name.
• Content you create — watchlists, notes, chart drawings, fund and runner settings, and your simulated (paper) trading activity.
• Credentials you provide — third-party API keys (e.g. a paper brokerage or a model provider). These are encrypted at rest and used only to operate the features you enable.
• Usage and device data — basic logs (requests, timestamps, errors, and coarse device/browser info) needed to run, secure, and debug the Service.
• Payment data — if you subscribe, Stripe collects and processes your card details directly. We receive only limited billing metadata (such as your plan, status, and a Stripe customer identifier); we never receive or store your full card number.

• to provide, maintain, and secure the Service and your account;
• to run the analysis, simulations, and features you request;
• to process subscriptions and prevent fraud and abuse;
• to improve the Service and the underlying models, using aggregated or de-identified data where practical;
• to communicate with you about your account, invites, and important changes.

Where the GDPR applies, we process your data to perform our contract with you (providing the Service), for our legitimate interests (securing and improving the Service), to comply with legal obligations, and with your consent where required. You may withdraw consent at any time.

We do not sell your personal information. We share it only with service providers that help us run the Service, under contracts that limit their use of it:

• Stripe — payment processing and subscription management;
• Alpaca — paper (simulated) brokerage connectivity, if you connect it;
• AI model providers (e.g. Anthropic) — to generate analysis you request;
• infrastructure and hosting providers that operate our servers.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the Service.

We keep your information for as long as your account is active, and for a limited period afterward as needed to comply with legal, tax, and security obligations. When you delete your account, we delete or de-identify your personal data, except where we must retain limited records to meet legal, accounting, or security requirements.

Depending on where you live (including under the GDPR and the California CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to not be discriminated against for exercising these rights. To make a request, email us at jaykrisell@gmail.com. You can also request deletion of your account and associated data at any time.

We protect your data with measures appropriate to its sensitivity, including hashing of passwords, encryption at rest for stored credentials, per-user data isolation, and access controls. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any incident.

We use only the cookies and local storage that are essential to run the Service — keeping you signed in and remembering your display preferences (such as theme and timezone). We do not use third-party advertising or cross-site tracking cookies. If we add optional analytics in the future, we will update this policy and, where required, ask for your consent first.

We operate from the United States, and your information may be processed there and in other countries where our service providers operate. Those countries may have different data- protection laws than yours; where required, we rely on appropriate safeguards for international transfers.

The Service is not directed to, and is not for, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. We will revise the “Last updated” date and, for material changes, provide additional notice where appropriate. Your continued use of the Service after changes take effect constitutes acceptance.