Privacy Policy
Last Updated: September 2026
We keep this policy in plain English. If anything is unclear, contact us at privacy@alphastocks.app.
1. What Information We Collect
Information You Provide
- Account information: Email address and optional display name. Authentication via Google OAuth (no passwords stored).
- Watchlist data: The stock tickers you add to your watchlist.
- Alert preferences: Which alerts you enable and your target settings.
- Payment information:Processed by Whop. Card details are entered on whop.com and never reach our servers — we do not store your credit card number, expiration date, or CVV. See Whop's Privacy Policy.
Information Collected Automatically
- Log data: IP address, browser type, operating system, pages visited, and timestamps.
- Device information: Screen resolution, language preference, and timezone.
- Cookies: See our Cookie Policy.
- Usage data: Companies you view, search queries, and feature usage. Used to improve the Service, not for advertising.
Information We Do NOT Collect
- Brokerage account information, portfolio holdings, or trading history
- Social Security number, government ID, or financial account numbers
- Precise geolocation data
2. How We Use Your Information
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide the Service (authenticate, show scores, manage watchlist) | Contract performance |
| Process payments via Whop | Contract performance |
| Send service-related emails | Contract performance |
| Send alert notifications | Contract / Consent |
| Count visits without cookies or identifiers | Legitimate interest |
| Analytics with cookies, and session replay | Consent (the cookie banner) |
| Prevent fraud and abuse | Legitimate interest |
| Comply with legal obligations | Legal obligation |
| Send product updates | Consent (opt out anytime) |
We do NOT:
- Sell your personal information to third parties. Ever.
- Use your data for targeted advertising.
- Send your watchlist or investment interests to Google, to advertisers, or to data brokers. The tickers you add reach one place only, PostHog, and only if you accept analytics.
3. How We Share Your Information
| Provider | What They Receive | Purpose |
|---|---|---|
| Whop | Email address, account ID, payment details you enter on whop.com | Payment processing |
| Google Analytics | Pages viewed, referrer, approximate location, device. Before you accept the cookie banner: no cookie and no identifier. After: an analytics cookie that links your visits. Never your email address. | Traffic measurement |
| PostHog (EU) | Product usage and session replay, with form inputs masked. Only if you accept— it does not load otherwise. | Finding where the product is confusing |
| Hosting provider | All data (encrypted at rest) | Infrastructure |
| Email service | Email address | Transactional emails |
We do NOT share your data with advertisers, data brokers, or social media platforms. Google Analytics is in the list above, so to be exact about it: we use Google to count traffic, and its advertising signals are switched off for every visitor — accepting the cookie banner does not turn them on. Google is not permitted to use what it receives here to build an advertising profile of you.
4. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account deletion.
- Payment records: Retained for 7 years as required by tax law.
- Server logs: Retained for 90 days.
- Backups: May contain your data for up to 30 days after deletion.
5. Your Rights
All Users
- Access: View your account information through profile settings.
- Correction: Update your email and name through profile settings.
- Deletion: Request account deletion by emailing privacy@alphastocks.app.
- Data export: Request a copy in machine-readable format (JSON).
EEA Users (GDPR Rights)
Right to erasure (Art. 17), data portability (Art. 20), restriction of processing (Art. 18), objection (Art. 21), withdrawal of consent, and right to lodge a complaint with your local data protection authority.
California Users (CCPA/CPRA)
Right to know, delete, correct, and opt out of sale. We do not sell your personal information. We will not discriminate for exercising privacy rights.
To exercise any rights, email privacy@alphastocks.app. We respond within 30 days.
6. International Data Transfers
AlphaStocks is operated from the United States. For EEA users, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Data Security
- Authentication via Google OAuth (no passwords stored)
- Sessions managed with secure, HTTP-only cookies
- Database connections use TLS encryption
- Rate limiting to prevent brute-force attacks
No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.
8. Children's Privacy
AlphaStocks is not intended for anyone under 18. We do not knowingly collect personal information from children under 18.
9. Changes to This Policy
If we make material changes, we will notify you by posting a notice on the Service or sending an email. Your continued use after changes constitutes acceptance.
10. Contact Us
Email: privacy@alphastocks.app
For GDPR-related complaints, you may also contact your local EU Data Protection Authority.