Privacy Policy

When you use AlphaBot, we collect the following types of information:

• Account information: Email address, name, and password when you register
• Brokerage API credentials: Encrypted API keys required to connect to your Alpaca account
• Usage data: Log data, feature usage, and performance metrics
• Payment information: Processed securely by Stripe — we never store card numbers
• Communication data: Emails or messages you send to our support team

We use collected information to:

• Operate and improve the AlphaBot service
• Execute trades on your behalf through your connected brokerage account
• Send transactional emails (trade alerts, subscription updates, account notifications)
• Provide customer support
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your trading data for any purpose other than operating your account.

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted using TLS 1.3
• Brokerage API keys are encrypted at rest using AES-256
• Passwords are hashed using bcrypt
• Access to production systems is restricted and audited

Despite these measures, no system is perfectly secure. You are responsible for maintaining the confidentiality of your account credentials.

AlphaBot integrates with the following third-party services:

• Supabase: Authentication and database hosting
• Stripe: Payment processing
• Alpaca Markets: Brokerage API for trade execution
• Vercel: Web application hosting

Each of these services has their own privacy policy. We encourage you to review them.

We retain your personal data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your personal data within 30 days, except where retention is required by law.

Trade execution logs may be retained for up to 7 years for compliance purposes.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, contact us at support@getalphabot.com.

AlphaBot uses essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings, but this may impact your ability to log in.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the platform. Continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact us at support@getalphabot.com.