Privacy Policy
Effective Date: January 1, 2026 · GDPR & CCPA Compliant
1. Information We Collect
We collect information necessary to deliver our quantitative tools and maintain secure sessions:
- Account Information: Email address, name, billing details (processed securely via Stripe).
- Trading Configuration: Screener filter presets, custom backtest logic parameters, risk allocation tolerances.
- Broker API Credentials: Encrypted Alpaca API key IDs and secrets submitted by you for automated rebalancing.
- Technical Telemetry: Anonymized IP addresses, browser user agent, session cookies for theme and auth tokens.
2. Strict Broker Credential Security
We treat brokerage credentials with extreme security isolation. Broker API keys are encrypted at rest using AES-256 / PBKDF2 cryptographic salts. We never request, store, or accept withdrawal permissions. Your credentials are only ever invoked in memory by the local execution daemon to query balances or submit market orders during scheduled rebalance windows.
We never sell, rent, or monetize your trading data or portfolio holdings to third-party high-frequency market makers.
3. Cookies & Session Storage
AlphaSteady uses local storage and cookies strictly for authentication session tokens, user preferences (such as light/dark mode selection), and fraud prevention rate-limiting.
4. GDPR & CCPA Rights
Under the European General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you have the right to request access to your stored data, request rectification of inaccurate records, or request total deletion ("Right to be Forgotten"). To exercise these rights, contact [email protected].