Privacy Policy

This Privacy Policy explains what information AlphaWhisper AI ("we", "us") collects, how we use it, and the choices you have. We keep this practical and honest: we collect the minimum we need to run the product well.

1. What we collect

Accounts

• Name, email, username, and a securely hashed password (we never store plaintext passwords).
• Optional trader type and signup source, given at signup.
• Your plan, trial dates, and the features your plan grants.
• If you sign in with Google, the email address and name Google gives us. We never receive your Google password.
• Billing is handled by our payment processor, Stripe. Card numbers are entered on Stripe and are never sent to or stored on our servers; we keep only the subscription status they report back.

Your journal

• The trades, notes, accounts and goals you enter into the Journal. This is your own trading record, it is private to your account, and it is not shown to other members.
• We do not connect to your broker and we do not import your positions. Everything in the Journal is there because you put it there.

Messages and analyst use

• Messages you send through the in-app Inbox, which go to us and to nobody else.
• If your plan includes Raven, the questions you ask it and a record of usage, so we can meter cost and improve the answers. Questions are sent to our AI provider to produce a reply.

Usage and security logs

• Authentication events (logins, failures, resets) and administrative actions, kept for security auditing.
• Standard technical data: IP address, browser type, and timestamps associated with requests.
• Session cookies, strictly for keeping you signed in. We do not use advertising cookies or cross-site trackers.

Contact form

• Name (optional), email, and your message.

2. How we use it

• To operate the Service: authentication, authorization, and delivering platform features.
• To bill your plan and manage your trial.
• To secure the Service: fraud prevention, abuse detection, and audit trails.
• To respond when you contact us.
• To understand aggregate demand (for example, how many swing traders vs day traders sign up).

We do not sell your personal information. We do not share it with advertisers.

3. Where it lives

• Hosting: our infrastructure runs on Fly.io. Data is stored on our application volumes there.
• Notifications: operational alerts (for example, a new signup or a message you send us) may be delivered by email or to our private team channel on Discord. These contain the information you submitted.
• Payments: Stripe processes subscriptions and holds the payment details you give them, under their own privacy policy.
• AI: questions you put to Raven are sent to our AI provider to generate a reply. They are not used to train third-party models.
• Market data displayed in the platform comes from third-party providers; your personal information is not sent to them.

4. Retention

• Journal entries: kept while your account exists, and deleted with it when you ask us to delete your account.
• Account data: kept while your account is active and for a reasonable period afterward for security records.
• Security and audit logs: retained on a rolling basis, then deleted or anonymized.

5. Your choices and rights

• Your journal: you can edit or delete any entry yourself at any time, and deleting your account deletes the whole book.
• Access and deletion: you can request a copy of your personal data or ask us to delete it, subject to security-log retention required for legitimate interests.
• Email: we send account and billing email because you have an account with us, not as a marketing list. Any marketing email we ever send will include an unsubscribe link.

Depending on where you live (for example, California or the EEA), you may have additional statutory rights. Contact us and we will honor them.

6. Security

Passwords are hashed with a modern memory-hard algorithm. Sessions are signed and revocable. Administrative actions are audited. Access to production systems is restricted. No system is perfectly secure, but security is designed in, not bolted on.

7. Children

The Service is not directed to anyone under 18, and we do not knowingly collect information from children.

8. Changes

We will post any changes here and update the date above. Material changes will be announced in the Service or by email.

9. Contact

Privacy questions or requests: use the contact form.