Privacy Policy
Last Updated: March 2026
We keep this policy in plain English. If anything is unclear, contact us at privacy@alphastocks.app.
1. What Information We Collect
Information You Provide
- Account information: Email address and optional display name. Authentication via Google OAuth (no passwords stored).
- Watchlist data: The stock tickers you add to your watchlist.
- Alert preferences: Which alerts you enable and your target settings.
- Payment information: Processed by Stripe. We do not store your credit card number, expiration date, or CVV. See Stripe's Privacy Policy.
Information Collected Automatically
- Log data: IP address, browser type, operating system, pages visited, and timestamps.
- Device information: Screen resolution, language preference, and timezone.
- Cookies: See our Cookie Policy.
- Usage data: Companies you view, search queries, and feature usage. Used to improve the Service, not for advertising.
Information We Do NOT Collect
- Brokerage account information, portfolio holdings, or trading history
- Social Security number, government ID, or financial account numbers
- Precise geolocation data
2. How We Use Your Information
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide the Service (authenticate, show scores, manage watchlist) | Contract performance |
| Process payments via Stripe | Contract performance |
| Send service-related emails | Contract performance |
| Send alert notifications | Contract / Consent |
| Improve the Service (analytics, bug fixing) | Legitimate interest |
| Prevent fraud and abuse | Legitimate interest |
| Comply with legal obligations | Legal obligation |
| Send product updates | Consent (opt out anytime) |
We do NOT:
- Sell your personal information to third parties. Ever.
- Use your data for targeted advertising.
- Share your watchlist or investment interests with any third party.
3. How We Share Your Information
| Provider | What They Receive | Purpose |
|---|---|---|
| Stripe | Payment details you enter | Payment processing |
| Hosting provider | All data (encrypted at rest) | Infrastructure |
| Email service | Email address | Transactional emails |
We do NOT share your data with advertisers, data brokers, social media platforms, or analytics companies that build advertising profiles.
4. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account deletion.
- Payment records: Retained for 7 years as required by tax law.
- Server logs: Retained for 90 days.
- Backups: May contain your data for up to 30 days after deletion.
5. Your Rights
All Users
- Access: View your account information through profile settings.
- Correction: Update your email and name through profile settings.
- Deletion: Request account deletion by emailing privacy@alphastocks.app.
- Data export: Request a copy in machine-readable format (JSON).
EEA Users (GDPR Rights)
Right to erasure (Art. 17), data portability (Art. 20), restriction of processing (Art. 18), objection (Art. 21), withdrawal of consent, and right to lodge a complaint with your local data protection authority.
California Users (CCPA/CPRA)
Right to know, delete, correct, and opt out of sale. We do not sell your personal information. We will not discriminate for exercising privacy rights.
To exercise any rights, email privacy@alphastocks.app. We respond within 30 days.
6. International Data Transfers
AlphaStocks is operated from the United States. For EEA users, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Data Security
- Authentication via Google OAuth (no passwords stored)
- Sessions managed with secure, HTTP-only cookies
- Database connections use TLS encryption
- Rate limiting to prevent brute-force attacks
No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.
8. Children's Privacy
AlphaStocks is not intended for anyone under 18. We do not knowingly collect personal information from children under 18.
9. Changes to This Policy
If we make material changes, we will notify you by posting a notice on the Service or sending an email. Your continued use after changes constitutes acceptance.
10. Contact Us
Email: privacy@alphastocks.app
For GDPR-related complaints, you may also contact your local EU Data Protection Authority.