Privacy Policy

• Your email address and login — to run your account and send the emails you opt into. If you sign in with Google or Apple we receive your name, your email address (or the relay address Apple makes for you) and a one-time sign-in token from them — never your Google or Apple password, contacts or anything else.
• Your team — which managers you delegated to, how much, and when.
• Your brokerage connection — the API key or token you chose to connect, stored encrypted at rest, plus the positions, cash and fills we read from that account to mirror your managers and show you your portfolio.
• Every proposal and your decision on it — the audit trail of what was proposed, approved, declined and filled.
• Your chats with managers — question and answer, kept so the explanation you were given can be reviewed later.
• Notification preferences — and, if you turn on push notifications, the browser subscription needed to deliver them.
• Pseudonymous product events — which screens are used and which actions taken, tied to your account id, not to third-party advertising identifiers. We run no advertising trackers.
• Billing identity — a Stripe customer id. Your card details never touch Alfred.

No card numbers, no government identity documents, no brokerage login passwords. Alfred connects to your brokerage through the key you generate there, not through your login.

• Supabase — database, authentication and encrypted storage (hosted in the United States).
• Vercel — hosts the website.
• Stripe — billing; holds your card details under its own privacy policy.
• Resend — delivers our emails.
• Google and Apple — only if you choose to sign in with them: they confirm who you are and pass us your name and email address, under their own privacy policies.
• Anthropic — powers "ask your manager" and two AI-driven managers. Chats send the manager's log and your mirrored holdings for that manager, never your email or identity. News scoring sends public headlines only, never user data.
• Your brokerage (eToro, SnapTrade and the brokerages it connects) — under your own agreement with them.
• Market data providers — receive ticker symbols, never your identity or holdings.

We do not sell your data, share it with advertisers, or use it to train AI models.

Running your account, mirroring your managers and billing you is performance of our contract with you. Product analytics and service emails are our legitimate interest in running and improving the service; marketing email is sent only with your opt-in and every message carries an unsubscribe link. Where local law requires consent for anything above, we ask for it.

For as long as your account exists. Decision and proposal history is kept while you are a customer because it is your audit trail. You can close your account from Settings in the app: everything stops that moment, and fourteen days later we delete your account, keys, portfolio ledger, chats and analytics identity. Signing in during those fourteen days and choosing to keep the account cancels the deletion. Anonymised aggregate statistics (for example "how many customers hired a manager") may be retained, and Stripe retains billing records for as long as tax law requires. Closing your account never moves or sells money — your positions are held at your own broker, not by us.

You can see almost everything we hold about you inside the app. To get a copy, correct something, or have it all deleted, email ijaz529@gmail.com from your account address; we act within 30 days. Depending on where you live you may also have the right to object to processing, to restrict it, to data portability, and to complain to a supervisory authority.

Brokerage keys are encrypted at rest with a key held outside the database; the website never holds a database administrator credential; every read of your data is bound to your login by database row-level rules. No system is perfectly secure; if we learn of a breach affecting you we will tell you without undue delay.

We use only the cookies needed to keep you signed in and to remember your preferences. There are no advertising or cross-site tracking cookies, so there is no cookie banner to click.

Material changes to this policy are announced on the site or by email before they take effect. The service is operated by [legal entity name and registration — to be confirmed]; contact ijaz529@gmail.com.