Privacy Policy

1. Introduction

AlphaTrak ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using AlphaTrak, you consent to the data practices described in this policy. If you do not agree with our policies, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, password (hashed)
• Profile Information: Display name, avatar, preferences
• Financial Preferences: Risk tolerance, trading experience (optional)
• Journal Entries: Trade notes, analysis, and reflections you create
• Watchlists & Alerts: Stocks and conditions you track
• Payment Information: Billing address (card details handled by our payment processor)
• Communications: Emails, support requests, feedback you send us

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Usage Data: Pages viewed, features used, searches performed
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, referring URLs
• Performance Data: Page load times, errors encountered

2.3 Information from Third Parties

We may receive information from third-party services you connect:

• Broker Accounts (Tradier): Account balance, positions, order history
• OAuth Providers (Google): Email, name, profile picture (if you sign up via Google)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and support requests
• Personalize your experience (e.g., AI insights, alert recommendations)
• Monitor and analyze usage patterns to improve features
• Detect, prevent, and address fraud, abuse, and technical issues
• Comply with legal obligations

4. Cookies and Tracking Technologies

4.1 Types of Cookies We Use

• Essential Cookies: Required for the Service to function (authentication, security, preferences). Cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with the Service. We use this data in aggregate to improve features.
• Preference Cookies: Remember your settings and choices (theme, layout, etc.)

4.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features of the Service.

4.3 Do Not Track

We do not currently respond to "Do Not Track" signals. However, you can opt out of analytics tracking in your account settings.

5. Third-Party Services

We integrate with third-party services to provide our features. Each service has its own privacy practices:

5.1 Brokerage Integration (Tradier)

If you connect a Tradier brokerage account, we receive read-only access to your account information (positions, orders, balances) to display in the Service and auto-import trades into your journal. We do not store your Tradier password—authentication uses OAuth tokens.

Tradier's privacy policy: https://tradier.com/privacy

5.2 Market Data Providers

We receive real-time and historical market data from licensed providers. Your searches and queries are processed by these services but are not tied to your personal identity.

5.3 AI/ML Services

AI analysis features may use third-party machine learning services. Queries are processed with your user ID for rate limiting but are not used to train third-party models.

5.4 Payment Processing

Payments are processed by Stripe. We do not store your full credit card number. Stripe's privacy policy: https://stripe.com/privacy

5.5 Analytics

We use privacy-focused analytics to understand usage patterns. Analytics data is aggregated and does not include personally identifiable information.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in these circumstances:

• With Your Consent: When you explicitly authorize sharing
• Service Providers: With vendors who help us operate the Service (hosting, email, payment processing), under strict confidentiality agreements
• Legal Requirements: If required by law, regulation, or legal process
• Protection of Rights: To protect the rights, property, or safety of AlphaTrak, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified of any change in ownership)
• Aggregated Data: We may share anonymized, aggregated data that cannot identify you (e.g., "50% of users use dark mode")

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account Data: Until you delete your account
• Journal Entries: Until you delete them or your account
• Usage Logs: 90 days, then anonymized
• Backup Archives: 30 days after deletion

After account deletion, we may retain certain information as required by law (tax records, fraud prevention) or for legitimate business purposes.

8. Data Security

We implement appropriate security measures including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Secure password hashing (bcrypt)
• Regular security audits and penetration testing
• Access controls and employee training
• Incident response procedures

While we strive to protect your information, no method of transmission over the Internet is 100% secure. You are responsible for maintaining the confidentiality of your password.

9. Your Rights and Choices

9.1 Access and Portability

You can access, download, or export your data at any time through your account settings. This includes your journal entries, watchlists, alerts, and account information.

9.2 Correction

You can update your account information at any time through the Settings page.

9.3 Deletion

You can delete your account and all associated data through Settings → Account → Delete Account. This action is irreversible. Certain data may be retained as required by law.

9.4 Marketing Communications

You can opt out of promotional emails by clicking "unsubscribe" in any marketing email or adjusting your notification preferences in Settings.

9.5 Broker Disconnection

You can disconnect your brokerage account at any time. We will stop syncing data from that broker, though historical journal entries will remain unless you delete them.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete your personal information
• Right to opt out of the sale of personal information (we don't sell your data)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@alphatrak.com or use the in-app tools.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Our legal basis for processing your data is: (a) your consent, (b) performance of our contract with you, (c) our legitimate business interests, or (d) compliance with legal obligations.

For GDPR inquiries, contact our Data Protection Officer at dpo@alphatrak.com.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

13. Children's Privacy

The Service is not intended for anyone under 18 years old. We do not knowingly collect personal information from children. If we learn we have collected personal information from a child under 18, we will delete that information promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

For significant changes, we will provide prominent notice (e.g., email notification or in-app banner).

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@alphatrak.com
• Data Protection Officer: dpo@alphatrak.com
• Via our Contact Page