Privacy
What we hold
Your email and display name (for sign-in and delivery). Your holdings, cost bases, watchlist, and the theses and hypotheses you write — this is financial-intent data and we treat it as sensitive: it is never sold, never shared with advertisers, and never logged in plaintext to third-party services.
Who else sees anything
Emails are delivered by Resend (they see your address and the message). When you use the natural-language features, the text you type is sent to our LLM provider to be parsed — that's the feature working, not tracking. Application logs go to Logfire without your theses or hypotheses in them. There are no third-party analytics trackers; usage measurement is first-party.
Retention and deletion
Closed positions and unfollowed strategies are kept — seeing your own history is part of the product. Deleting your account removes all of it: positions, watches, backtests, notifications, preferences, and your place on the allowlist; the admin audit log is anonymized rather than rewritten. Deletion is immediate and confirmed by a final email.
Every email we send carries a working unsubscribe link that requires no login. The in-app inbox always keeps the full record, so turning email off loses nothing.
v1, written for the invite-only phase; counsel review comes before public signup. Questions or data requests: hobing.tan@gmail.com.