Privacy Policy

Last updated: February 23, 2026

Your privacy matters to us. This policy explains how AlphaGuru collects, uses, and protects your personal information when you use our AI-powered investment research platform.

TABLE OF CONTENTS

1. 1. Information We Collect
2. 2. How We Use Your Information
3. 3. Data Storage & Security
4. 4. Third-Party Services
5. 5. Your Rights
6. 6. Cookies & Tracking
7. 7. Children's Privacy
8. 8. Changes to This Policy
9. 9. Contact Us

1. Information We Collect

AlphaGuru collects information necessary to provide you with personalized, AI-powered investment research. We are committed to collecting only what we need and being transparent about what we gather.

Personal Information

When you create an account or use our services, we may collect:

• Name, email address, and profile picture (via Google OAuth or other authentication providers)
• Account preferences and settings, including your preferred AI provider and timezone
• Investment style profile (e.g., growth, value, quantitative) and risk tolerance level
• Communication preferences and notification settings

Financial Data

To deliver meaningful investment research, we may collect and process:

• Watchlist tickers and portfolio holdings you voluntarily enter into the platform
• Investment theses, trade journal entries, and prediction records
• Position sizes, cost bases, and performance data you choose to provide
• Earnings calendar preferences and stock screening criteria

Important: AlphaGuru does not have direct access to your brokerage accounts. All portfolio data is entered by you voluntarily, either manually or via CSV upload.

Usage & Interaction Data

We collect data about how you interact with our platform to improve the experience:

• Pages visited, features used, and session duration
• Search queries and analysis requests submitted to our AI modules
• Device information, browser type, operating system, and IP address
• Error logs and performance metrics to diagnose technical issues

AI Interaction Data

When you use our AI-powered modules (10-Bagger Scout, Fragility Cartographer, LLM Council, AI CIO, etc.), we collect:

• Analysis requests including ticker symbols, questions, and contextual parameters
• AI-generated responses, scores, verdicts, and recommendations
• Cognitive profile data including detected behavioral patterns and bias alerts
• Module session logs, execution metrics (latency, token usage), and prompt performance data
• Feedback and ratings you provide on analysis quality

2. How We Use Your Information

Providing & Improving Services

We use your information to operate and improve the AlphaGuru platform:

• Delivering AI-powered investment analyses through our suite of research modules
• Generating personalized daily investment memos via the AI CIO system
• Running multi-model deliberations, deep research sessions, and Oxford-style debates in the LLM Council
• Fetching real-time financial data from SEC EDGAR, Finnhub, Alpha Vantage, and other market data providers

Personalization

AlphaGuru is designed to understand you as an investor. We use your data to:

• Tailor AI analysis based on your investment style, portfolio holdings, and risk tolerance
• Build and maintain your cognitive profile to detect behavioral biases (e.g., confirmation bias, anchoring, FOMO)
• Provide thesis-aware analysis that considers your existing investment rationale
• Generate behavioral alpha alerts through the Mirror component of the AI CIO
• Track prediction accuracy and conviction changes over time for self-improvement

Platform Improvement

Aggregate, anonymized usage data helps us:

• Optimize prompt performance and reduce AI response latency
• Identify which modules and features deliver the most value to investors
• Improve signal calibration and recommendation accuracy across the platform
• Develop new features and research capabilities based on user needs

Communications

With your consent, we may use your email to send:

• Platform updates, new feature announcements, and security notifications
• Investment research newsletters (via Substack integration)
• Smart alerts based on your watchlist and portfolio activity

3. Data Storage & Security

Infrastructure

Your data is stored securely using industry-standard infrastructure:

• Database: PostgreSQL with pgvector extension, hosted on Neon (production) with SSL encryption for all connections
• Hosting: Application deployed on Vercel with edge network distribution and automatic HTTPS
• Caching: Redis for session management and temporary data caching with automatic expiration
• Vector Search: Semantic search vectors are stored in PostgreSQL via pgvector - no external vector database is used

Encryption & Protection

• All data in transit is encrypted using TLS 1.3
• Database connections require SSL certificates
• Authentication tokens are signed using secure secrets (NEXTAUTH_SECRET)
• API keys and credentials are stored as environment variables, never in source code
• Regular security audits and dependency vulnerability scanning

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Analysis history, session logs, and research data are retained to support your ongoing investment journey. Cached market data (quotes, filings) follows TTL-based expiration policies.

4. Third-Party Services

AlphaGuru integrates with the following categories of third-party services to deliver our platform. Each integration is governed by the respective provider's own privacy policy.

Authentication Providers

• Google OAuth 2.0: Used for account creation and sign-in. We receive your name, email, and profile picture. We do not access your Gmail, Google Drive, or other Google services unless you explicitly enable Gmail newsletter integration within the Capital Dashboard.

Financial Data APIs

We retrieve publicly available market data from:

• SEC EDGAR (public filings: 10-K, 10-Q, 8-K, 13F, DEF 14A)
• Finnhub (real-time quotes, company profiles, news)
• Alpha Vantage (fundamental data, technical indicators)
• Financial Modeling Prep / FMP (financial statements, screening data)
• Yahoo Finance (market indices, sector performance)

These services receive only the ticker symbols or search queries necessary to fulfill your requests. No personal data is shared with financial data providers.

AI Model Providers

AlphaGuru uses multiple AI model providers for analysis. When you submit an analysis request, the relevant query and context are sent to:

• Google Gemini: Primary AI provider for 10-Bagger Scout, Fragility Cartographer, and LLM Council deliberations
• Anthropic Claude: Used in LLM Council multi-model deliberations and debate mode
• OpenAI GPT: Used in LLM Council deliberations and deep research mode
• Additional Providers: Groq, DeepSeek, Mistral, and others via OpenRouter for Capital Dashboard AI features

We send only the minimum context necessary for analysis. Personalized context (your investment style, biases) may be included in prompts to tailor results but is not used to train any third-party AI models. Each provider's data handling is governed by their respective terms of service.

Hosting & Infrastructure

• Vercel: Application hosting, serverless functions, edge network
• Neon: Cloud PostgreSQL database with pgvector
• Substack: Newsletter distribution (if you subscribe)

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right to Access

You can request a copy of all personal data we hold about you, including your profile information, portfolio data, analysis history, cognitive profile, and AI interaction logs. We will provide this data in a structured, machine-readable format within 30 days of your request.

Right to Deletion

You may request the deletion of your account and all associated data at any time. Upon deletion, we will remove:

• Your user profile and authentication credentials
• All portfolio, watchlist, and thesis data
• AI analysis history, session logs, and cognitive profile
• CIO signals, memos, investment rules, and behavioral events
• Prompt execution metrics and module memory

Deletion is permanent and irreversible. Certain anonymized, aggregated data may be retained for platform improvement purposes where it cannot be linked back to you.

Right to Data Portability

You can export your data at any time. AlphaGuru supports data export in JSON and CSV formats for portfolios, watchlists, trade journals, theses, predictions, and analysis history.

Right to Opt-Out

• You can disable behavioral profiling (cognitive bias detection) in your settings
• You can opt out of personalized AI analysis and receive generic results
• You can unsubscribe from all marketing communications at any time
• You can disable specific data collection features (e.g., session logging) via the Capital Settings page

Right to Correction

You can update or correct your personal information at any time through your profile settings. If you believe any data we hold about you is inaccurate, contact us and we will rectify it promptly.

To exercise any of these rights, please contact us at privacy@alphaguru.ai. We will respond within 30 days.

6. Cookies & Tracking

AlphaGuru uses cookies and similar technologies to provide and improve our services:

Essential Cookies

These cookies are strictly necessary for the platform to function and cannot be disabled:

• Session Cookie: Managed by NextAuth.js to maintain your authenticated session
• CSRF Token: Protects against cross-site request forgery attacks
• Preferences: Stores your theme, layout, and display settings

Analytics Cookies

With your consent, we may use analytics cookies to understand how you use AlphaGuru. This helps us identify popular features and areas for improvement. Analytics data is aggregated and does not personally identify you.

What We Do Not Use

• We do not use advertising or retargeting cookies
• We do not sell cookie data to third parties
• We do not use cross-site tracking pixels
• We do not fingerprint your browser or device for advertising purposes

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the platform.

7. Children's Privacy

AlphaGuru is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. Our platform involves financial data, investment analysis, and complex AI-driven research tools designed for adult investors.

If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that data from our systems. If you are a parent or guardian and believe your child has provided personal information to AlphaGuru, please contact us at privacy@alphaguru.ai.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, new features, regulatory requirements, or for other operational or legal reasons. When we make material changes:

• We will update the "Last updated" date at the top of this page
• We will notify registered users via email for significant changes
• We will display a prominent notice on the platform for at least 30 days
• Continued use of AlphaGuru after changes constitutes acceptance of the updated policy

We encourage you to review this policy periodically. Historical versions of this policy are available upon request.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

This privacy policy is effective as of February 23, 2026 and applies to all users of the AlphaGuru platform.