1. Introduction
This Privacy Policy describes how Alphadar ("we", "us", or "our") collects, uses, stores, and shares your information when you use our financial content analysis platform, available as a web application at alphadar.com, an iOS app, and a Chrome browser extension (collectively, the "Service").
By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address (used for authentication and account identification)
- Name (if provided)
- Account preferences and settings
2.2 Content Data
When you use the Service, we collect and process:
- Newsletter content you import from Substack, Patreon, Seeking Alpha, Gmail, or email forwarding
- Trade recommendations extracted from that content using AI
- Source metadata (publisher names, publication dates)
- Performance data and calculations for tracked recommendations
2.3 Gmail Data
If you choose to connect your Gmail account, we request access using the Gmail API with the gmail.readonly scope. This allows us to read (but not modify, send, or delete) your email messages.
We only scan your inbox to identify and import emails from financial newsletter senders that you have added as sources. We do not read, store, or process your personal correspondence.
You can disconnect your Gmail account at any time from the Service's settings. When you disconnect, we revoke the OAuth token with Google, permanently delete stored authentication tokens and sender classification data, and stop all access to your Gmail data. Previously imported newsletter content is retained unless you delete your account.
You can also revoke Alphadar's access to your Google account at any time by visiting your Google Account permissions page.
2.4 Device Information
- Device tokens for push notifications (iOS only, via Apple Push Notification Service)
- Platform information (web, iOS, or Chrome extension)
- Error logs and crash reports for debugging
3. How We Use Your Information
We use the information we collect to:
- Provide and operate the Service, including extracting trade recommendations and tracking performance
- Send you notifications about new content and updates (with your consent)
- Maintain, improve, and secure the Service
- Respond to your requests and provide support
- Comply with legal obligations
We do not sell your personal information. We do not use your data for advertising or interest-based profiling.
4. Google API Services — Limited Use Disclosure
Alphadar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, Alphadar:
- Only uses Gmail data to identify and import newsletter and investment-related content that you have opted to track — the core functionality of the Service
- Does not use Gmail data for serving advertisements, retargeting, or interest-based profiling
- Does not sell or transfer Gmail data to third parties for advertising, data brokering, or credit-worthiness purposes
- Does not use Gmail data to train generalized or non-personalized AI/ML models
- Does not allow humans to read your Gmail data unless (a) you have given explicit consent (e.g., for support), (b) it is necessary for security purposes such as investigating abuse, or (c) it is required to comply with applicable law
- Only shares Gmail data with AI processing providers to the extent necessary to provide the Service (extracting trade recommendations from newsletter content), and requires those providers to adhere to equivalent data protection obligations
- Immediately revokes OAuth tokens with Google and permanently deletes stored authentication tokens and sender data when you disconnect your Gmail account, and stops all access to your Gmail data
5. How We Share Your Information
We may share your information only in the following circumstances:
- Service providers: We use third-party providers for authentication, cloud hosting, AI processing, email delivery, and push notifications. These providers process data on our behalf and are contractually required to protect it.
- AI processing: Newsletter content is sent to third-party AI services to extract trade recommendations. We do not send your personal information or email metadata to AI providers — only the newsletter content itself.
- Legal compliance: We may disclose your information if required to do so by law or in response to valid legal process.
- Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your data becomes subject to a different privacy policy.
6. Data Storage and Security
We implement appropriate technical and organizational measures to protect your data:
- Data is encrypted at rest in our database
- Sensitive credentials (including Gmail tokens) are encrypted using AES-256-GCM
- All data in transit is encrypted using TLS
- Access to production systems is restricted to authorized personnel
No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Data Retention and Deletion
We retain your data for as long as your account is active or as needed to provide the Service.
- Account deletion: You can delete your account at any time from the Settings page within the app. When you delete your account, we will delete your personal data, imported content, and associated records within 30 days.
- Gmail disconnection: When you disconnect Gmail, we delete stored authentication tokens within 24 hours and stop all access to your Gmail data. Previously imported newsletter content is retained unless you delete your account.
- Legal retention: We may retain certain data as required by law or to resolve disputes.
8. Your Rights and Choices
You have the right to:
- Access your personal data by contacting us
- Delete your account and all associated data from the Settings page within the app
- Disconnect third-party services (Gmail) at any time from the app settings
- Opt out of push notifications via your device settings, or email communications via unsubscribe links
- Withdraw consent for data processing at any time (which may limit your ability to use the Service)
To exercise any of these rights, contact us at support@alphadar.com
9. Cookies
Alphadar uses cookies to operate and improve the Service. When you first visit, a consent banner allows you to accept or reject non-essential cookies.
9.1 Essential Cookies
These cookies are required for authentication and session management. They cannot be disabled without losing access to the Service.
- Session cookies — managed by our authentication provider (Clerk) to keep you signed in
- cookie_consent — stores your cookie preference choice (essential/analytics)
9.2 Analytics Cookies
If you consent, we use Google Analytics to understand how visitors interact with our site. Google Analytics sets cookies such as _ga and _gid to distinguish users and throttle request rates. We enable IP anonymization so your full IP address is never stored by Google.
Analytics cookies are only set after you click "Accept all" on the consent banner. If you reject non-essential cookies, no analytics cookies will be set and no data will be sent to Google Analytics.
9.3 Managing Your Preferences
You can change your cookie preferences at any time by clearing the cookie_consent cookie from your browser settings — the consent banner will reappear on your next visit. You can also control cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.
10. Children's Privacy
The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@alphadar.com.
11. International Data Transfers
Your information may be transferred to and processed in the United States, where our servers and service providers are located. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your jurisdiction.
12. California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Request deletion of your personal information
- Opt out of the sale of your personal information (we do not sell personal information)
- Not be discriminated against for exercising your privacy rights
To exercise these rights, contact us at support@alphadar.com.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date at the top. If changes materially affect how we use Google user data, we will notify you and obtain your consent before applying the changes. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or our data practices:
Last Updated: March 12, 2025