Privacy Policy

Authentication data: Your Google account name, email address, and profile photo are collected when you sign in via Google OAuth. This data is provided by Google and stored in Firebase Authentication.

Portfolio data: Holdings you enter or import (ticker symbols, share counts, cost basis, purchase dates, notes) are stored in Firebase Firestore under your authenticated user ID. If you connect a brokerage account via Snaptrade, your positions, lot-level cost basis, and transaction history (buys, sells) are also imported and stored.

Usage data: Vercel Analytics collects anonymized, aggregated page view data. No personally identifiable information is included in analytics data.

AI feature inputs: When you use Intel analysis or Macro Stress Test features, your portfolio holdings are sent to Google Gemini AI to generate analysis. This data is transmitted to Google's API and is subject to Google's API data usage policies.

All portfolio and authentication data is stored in Firebase (Google Cloud), a SOC 2 compliant cloud database.

Access to your data is restricted by Firebase security rules. Only your authenticated account can read or write your portfolio data. No other Alloy Alpha user can access your holdings.

As operator of this service, Alloy Alpha's developer has administrative access to the Firebase project, which includes the ability to view stored data. This is a technical necessity of operating any cloud-hosted service — it is the same as how the operator of any SaaS product has backend access to their database. This access is never used to view individual user portfolios for personal benefit.

Data is stored in the United States on Google Cloud infrastructure.

Your portfolio data is used solely to power the features of the Alloy Alpha application: portfolio display, risk analysis, signal generation, and AI-powered intelligence.

We do not sell your data to any third party.

We do not use your portfolio data for advertising purposes.

Alloy Alpha products are ad-free. We do not allow advertisers to access or influence content.

Your portfolio data is never used to inform, influence, or benefit any personal trading activity by the operator. Alloy Alpha's developer does not trade based on aggregated user portfolio data or any individual user's holdings.

Conflict-of-interest disclosure: The operator of Alloy Alpha may personally hold positions in securities that appear in users' portfolios or that are referenced in AI-generated analysis. This is a natural consequence of operating a portfolio tool. The operator does not trade based on non-public knowledge of user holdings, does not front-run user activity, and does not use aggregate user position data to inform personal trading decisions. Alloy Alpha's AI analysis is derived entirely from public market data and news — not from user portfolio inputs.

Anonymized, aggregated analytics data (page views, session counts) may be used to improve the application.

Intel analysis and Macro Stress Test features send your portfolio holdings (ticker symbols, sector, and weight — not dollar values) to the Google Gemini API to generate AI analysis.

This processing is subject to Google's Gemini API Terms of Service and Google's privacy policies.

You can opt out of AI features by not using the Intel or Macro Stress Test features. These features require explicit user action to trigger — they do not run automatically.

The AI consent notice shown on first login must be acknowledged before AI features are accessible.

Alloy Alpha uses browser localStorage to persist your preferences (display density, private mode, alert configuration, AI consent acknowledgment). This data never leaves your device.

Firebase Authentication uses cookies to maintain your login session.

Vercel Analytics uses privacy-preserving analytics that do not require cookie consent under most jurisdictions as no personally identifiable data is collected.

Right to access: You can export all your portfolio data at any time using the Export JSON or Export CSV features in the app.

Right to deletion: You can delete individual holdings directly in the app. To request full account deletion (all portfolio data, snapshots, and account records), email privacy@alloyalpha.com with subject "Data Deletion Request." All Firestore data associated with your user ID will be permanently deleted within 30 days.

Right to correction: You can edit or delete any portfolio entry directly within the app.

California residents (CCPA): We do not sell personal information. You have the right to know what personal information is collected and to request deletion.

EU residents (GDPR): The legal basis for processing your data is legitimate interest (providing the service you signed up for). You have the right to request a copy of your data, request deletion, or withdraw consent at any time.

Your portfolio data is retained for as long as your account is active.

If you have not logged in for 12 months, we may delete your data after providing advance notice.

You may request immediate deletion at any time.

All data is transmitted over HTTPS/TLS.

Firebase security rules are configured to prevent any cross-user data access.

API endpoints are protected by Firebase ID token verification on every request.

We recommend enabling two-factor authentication on the Google account you use to sign in.

For privacy requests, data deletion, or questions about this policy, email privacy@alloyalpha.com. You can also reach us via the @AlloyAlphaTeam account on X (formerly Twitter).

We will respond to requests within 30 days.

We may update this policy as the product evolves. Material changes will be communicated via the app. The "last updated" date at the top of this page will reflect any changes.

Continued use of Alloy Alpha after a policy change constitutes acceptance of the updated policy.