Privacy Policy

1. Who is responsible

Little Harbor Labs is the controller of personal information processed for AlphaTrend. Contact: [email protected] (privacy), [email protected] (legal), or [email protected] (general support).

2. Information we collect

• Account data: name, email address, password hash (we do not store plaintext passwords), email verification status, and Terms acceptance timestamp/version.
• Profile and preferences: avatar, investor profile fields you choose to provide, navigation and grid preferences, notification and digest settings.
• Product data: watchlists, portfolio lots and sales, alerts, reports and schedules, education progress, and similar workspace content you create.
• Product feedback and surveys: feedback text you submit, the page path shown in the feedback form at submit time, and answers to optional in-app product surveys. Private feedback is visible to Little Harbor Labs staff. If you share an idea on the public ideas board, its title and details (not your email) are visible to other signed-in users so they can upvote priorities.
• Community content: posts, comments, messages, theses, predictions, ratings, group activity, and uploads you submit, including visibility settings you choose.
• Brokerage connection data (optional): tokens and synced holdings metadata needed to display and refresh connected accounts. We do not use broker connections to place trades.
• Technical and security logs: IP address, user agent, approximate device/browser information, timestamps, and diagnostic events needed to operate, secure, and debug the Service.

We also process non-personal or aggregated market data from third-party providers to power quotes, fundamentals, charts, and model features.

3. How we use information

• Authenticate users, verify email, reset passwords, and maintain sessions.
• Provide research, portfolio, watchlist, alert, report, education, and community features.
• Send transactional email (verification, password reset) and optional digests/alerts you enable.
• Personalize navigation and stored layouts.
• Detect abuse, enforce Terms, secure accounts, and maintain service reliability.
• Comply with law and respond to lawful requests.
• Improve product quality using aggregated or de-identified analytics where practical.

We do not sell your personal information. We do not use your account content to provide personalized investment advice.

4. Legal bases (where applicable)

Where data-protection laws require a legal basis, we rely on: performance of a contract (providing the Service you request); legitimate interests (securing and improving the Service, preventing abuse); consent (optional notifications, certain marketing if ever offered, and optional integrations); and legal obligation where we must retain or disclose information.

5. How we share information

• Other users: content you mark public, share with followers, or post in community spaces is visible according to those settings.
• Service providers: hosting, databases, email delivery (for example Resend), analytics or error monitoring we may enable, and similar processors that handle data only to provide services to us under contractual confidentiality and security obligations.
• Integrations you enable: brokerage or other connected providers receive what is necessary to complete the connection you authorize.
• Legal and safety: we may disclose information to comply with law, enforce our Terms, or protect rights, safety, and security.
• Business transfers: if Little Harbor Labs is involved in a merger, acquisition, or asset sale, personal information may transfer as part of that transaction subject to this Policy’s protections.

6. Security and storage

We apply industry-standard safeguards designed to protect personal information, including:

• Encryption in transit (TLS) for Service traffic.
• Password hashing using modern one-way algorithms; passwords are never stored in plaintext.
• Access controls and least-privilege practices for production systems.
• Encryption at rest for sensitive brokerage tokens when application encryption keys are configured.
• Session management with idle timeouts and email verification for new accounts.
• Monitoring and operational controls intended to detect and respond to abuse.

No security program is perfect. You are responsible for safeguarding your credentials and for the security of devices you use to access the Service. If you believe your account has been compromised, contact us immediately at [email protected].

Personal information is stored on infrastructure operated by our hosting and database providers. Depending on configuration, data may be processed in the United States or other countries where we or our processors operate. Where required, we use appropriate transfer safeguards.

7. Retention

We retain account and product data while your account is active and for a reasonable period afterward as needed to operate the Service, resolve disputes, enforce agreements, and meet legal, tax, or security requirements. Backups and logs may persist for a limited additional period. When we no longer need personal information, we delete or de-identify it.

8. Your choices and rights

You can update profile and many privacy-related settings in-product, control notification preferences, and disconnect optional integrations. Depending on your location, you may have rights to access, correct, delete, export, or restrict certain personal information, or to object to certain processing. To exercise these rights, email [email protected]. We may need to verify your identity. Some data may be retained where legally required.

If you are in a jurisdiction with a designated privacy regulator, you may also lodge a complaint with that authority.

9. Cookies and similar technologies

We use cookies and similar technologies for authentication, session security, preference storage, and essential Service operation. Disabling cookies may prevent sign-in or core features from working.

10. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

11. Changes

We may update this Policy from time to time. We will revise the effective date and version above. Material changes may be communicated in-product or by email where appropriate. Continued use after an update constitutes acceptance of the revised Policy except where additional consent is required by law.

12. Contact

Privacy requests: [email protected]. Legal: [email protected]. General support: [email protected].