Privacy Policy
Last updated: April 2026
1. Information We Collect
We collect the following information when you use tradingstocks.ai:
- Account information: email address and password (bcrypt hashed)
- Subscription data: Stripe customer ID and subscription status (no card numbers — Stripe handles payment)
- Brokerage access: Alpaca OAuth access token (encrypted at rest)
- Portfolio data: daily portfolio value and position snapshots from your connected Alpaca account
- Usage data: standard web server logs (IP address, request paths, timestamps)
2. How We Use Your Information
- To authenticate you and maintain your account
- To execute trading strategies on your connected Alpaca account at your direction
- To process your subscription via Stripe
- To display your portfolio performance on the dashboard
- To send service-related communications (subscription receipts, security notices)
3. Third-Party Services
We use the following third parties to deliver the Service:
- Stripe — payment processing. Your card details are held by Stripe and never seen by tradingstocks.ai. Stripe's privacy policy applies to payment data.
- Alpaca Securities LLC — brokerage execution. Your OAuth access token is used solely to execute strategy trades and read account data at your direction.
- Hetzner — server infrastructure. Your data is stored on servers in the EU.
4. Data Security
Passwords are bcrypt-hashed and never stored in plain text. Alpaca OAuth tokens are encrypted at rest using AES-256. All traffic is served over HTTPS. We do not sell or share your personal data with third parties for marketing purposes.
5. Data Retention
Your account data is retained while your account is active. If you close your account, we will delete your personal data within 30 days, except where retention is required by law. Portfolio snapshot data is retained for 2 years to support performance reporting.
6. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us. You may disconnect your Alpaca account at any time, which will immediately revoke our access to your brokerage account.
7. Cookies
We use a single session cookie for admin authentication. We do not use third-party tracking cookies or advertising cookies.
8. Contact
For privacy-related requests, contact us at support@tradingstocks.ai.