Privacy Policy

1. What we collect

Account data: email address, display name, password (stored as a salted hash; we never see or store plaintext passwords).

Content you post: theses, pressures, comments, votes, and basket configurations. Theses and their scores are public by design.

Brokerage connection (optional): if you link a brokerage account via OAuth, we store the access token the brokerage issues and read account data (positions, orders, balances) needed to display your portfolio and place the orders you configure. We never see your brokerage login credentials, and we never hold your funds. You can revoke access at any time from your brokerage dashboard.

Payments: handled by Stripe. We never see or store your card number; we store your subscription tier and Stripe customer reference.

Usage basics: standard server logs (IP, timestamps, pages) for security, rate-limiting, and abuse prevention.

2. How we use it

To operate the Service: scoring your theses (your submitted text is processed by automated AI systems), rendering the leaderboard and public pages, executing basket orders you configure, billing subscriptions, sending transactional email (password resets, subscription notices, and, if your tier includes them, news alerts you can disable), and preventing abuse.

We do not sell your personal data.

3. What is public

Your display name, posted theses, their AI scores and receipts, your leaderboard rank and track-record statistics (e.g. PHI/ELO), and propagation counts are public. Your email, brokerage data, holdings dollar amounts, and payment details are never public.

4. Third parties we rely on

Stripe (payments), Alpaca Securities (brokerage, if you connect one), and infrastructure providers (hosting/CDN, email delivery). Each receives only what it needs to perform its function and operates under its own privacy policy. News and market data come from public sources and licensed feeds.

5. Retention and deletion

Account data is kept while your account is active. You may request deletion of your account and personal data at any time; public track-record content may be retained in de-identified form to preserve leaderboard integrity. Server logs rotate on a short schedule.

6. Security

Passwords are hashed, brokerage tokens are stored encrypted, transport is HTTPS, and access to production data is limited to the operator. No system is perfectly secure; we will notify affected users of any material breach as required by law.

7. Children

The Service is not directed to anyone under 18, and we do not knowingly collect data from children.

8. Contact

Privacy questions or deletion requests: [email protected]