Privacy Policy
Effective Date: March 2026
This Privacy Policy explains what data RogueAlpha collects, how we use it, and what choices you have. We’ve written it in plain English because we think you deserve to actually understand it.
1. What We Collect
Account information
When you sign up, we collect your email address and the password you create (stored as a secure hash — we never see your actual password).
Usage data
We collect information about how you use the Platform: pages visited, features used, signals generated, and general activity logs.
Trade and signal data
When the Platform generates signals and executes trades on your behalf, we store records of those signals — including the symbol, reasoning, confidence score, entry/exit prices, and outcome — in our database.
Brokerage connection data
To execute trades, you connect your Alpaca account. We store the credentials necessary to interact with Alpaca on your behalf (see Section 3). We do not store your Alpaca account number, personal financial information, or any data from Alpaca beyond what’s necessary to operate the trading engine.
2. How We Use Your Data
We use your data to:
- —Operate the Platform — execute the trading engine, display your signals and positions, run analysis tools
- —Improve the engine — aggregate signal outcomes to evaluate and refine the AI's performance over time
- —Communicate with you — send beta updates, important notices, and responses to your inquiries
- —Maintain security — detect and prevent unauthorized access or abuse
- —Comply with legal obligations — if required by law
We do not sell your data. We do not use it for advertising. We do not share it with third parties except as described in Section 4.
3. What We Don’t Collect (and How We Handle API Credentials)
RogueAlpha never has direct access to your brokerage funds. All trades execute on Alpaca’s infrastructure, on your own account.
Regarding your Alpaca API credentials:
- —Your keys are stored encrypted in our database. We do not log or expose your secret key after it is saved.
- —In a future OAuth integration, we will store only the OAuth access token — not your key or secret.
- —We do not use your credentials for any purpose other than executing the trading engine on your behalf.
- —You can revoke our access at any time by deleting or rotating your keys in your Alpaca account.
4. Third Parties We Work With
To provide the service, we work with the following third parties. None of them sell your data.
| Service | Purpose |
|---|---|
| Supabase | Database and authentication — your account data and trade records live here |
| Vercel | Hosting and serverless infrastructure |
| Alpaca | Brokerage execution — trades are placed on your Alpaca account |
| Anthropic | AI analysis — signal generation prompts are sent to Claude (Anthropic's API). These prompts include market data and your account context, but not your personal identity. |
| Resend | Transactional email — used to send confirmations and beta communications |
5. Data Retention
We retain your account data and trade history for as long as your account is active. If you delete your account, we will remove your personal data within a reasonable period (typically 30 days), except where we are required to retain records for legal or compliance purposes.
Aggregated, anonymized data (e.g., engine performance statistics that cannot be tied back to you) may be retained indefinitely.
6. Your Rights
You have the right to:
- —Access your data — request a copy of what we hold about you
- —Correct inaccurate data
- —Delete your account and associated data
To exercise any of these rights, email beta@roguealpha.ai. We will respond within a reasonable timeframe.
7. Security
We take reasonable technical and organizational measures to protect your data — including encrypted storage of credentials, secure HTTPS connections, and access controls on our infrastructure.
No system is perfectly secure. If you believe your account has been compromised, contact us immediately at beta@roguealpha.ai and rotate your Alpaca API keys through Alpaca directly.
8. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Platform. The effective date at the top of this document will always reflect when it was last updated.
9. Contact
Privacy questions or data requests: beta@roguealpha.ai
RogueAlpha is an independent software product. It is not affiliated with, endorsed by, or a registered service of Alpaca Securities LLC or any financial regulator.
© 2026 RogueAlpha. All rights reserved.