Privacy Policy

1 Information we collect

Information you give us.

• Account information: your email address, your name if you provide it, and your password. We store passwords only as a one-way cryptographic hash; we cannot read them.
• Waitlist and access requests: your email address, your name if you provide it, and the plan you said you were interested in.
• Subscription information: your plan, subscription status, renewal date, and the customer and subscription identifiers our payment processor assigns. We never receive or store your card number (see Section 5).
• Content you create: saved research (the tool, the settings you ran, a summary of the results, and any name or note you add), followed portfolios and securities, saved strategies and their holdings over time, and portfolios you build or upload in Portfolio Lab.
• Messages: anything you send us, for example by email to support.

Information collected automatically.

• Sign-in sessions: when you sign in, we record the time, your IP address and your browser’s user-agent string, and we update the time you were last active.
• Tool usage: each time you run an analysis in a tool we record which tool, a fingerprint of the settings, your plan and the time. We use this to count free-plan runs and to keep the Platform working.
• Security events: failed sign-in attempts and password-reset requests, including the IP address a reset was requested from.
• Email delivery records: for each email we send you, the address, subject, type and whether it was delivered.
• Server logs: like most websites, our servers log each request, including the IP address, the page requested, the browser and the time.

2 Cookies and browser storage

We use cookies and similar browser technologies (such as your browser’s local storage) to operate the Platform. Cookies are small text files stored on your device when you visit a website; they help us recognize your device and remember certain information. We use them to keep you signed in, to remember your settings and preferences, and to save the portfolios and analyses you carry from one tool to the next. These are necessary for the Platform to work, and if you block them some features, including signing in, will not work.

When you subscribe, our payment processor, Stripe, may use its own cookies and similar technologies on its checkout and billing pages, under its own privacy policy. Some pages load open-source software libraries from Cloudflare’s public content network, which receives your IP address when your browser fetches them. You can manage cookies through your browser settings. We do not use advertising or tracking cookies and similar technologies.

The Platform is not designed to respond to “do not track” signals received from browsers.

3 How we use your information

We use your information to:

• provide and operate the Platform, including running, saving and showing you your analyses;
• create and secure your account, sign you in, and reset your password;
• apply the limits and features of your plan, including the free plan’s monthly run limit;
• process subscriptions, billing and renewals;
• send you service emails about your account, security and subscription;
• respond to your requests and provide support;
• diagnose problems and improve the Platform;
• detect and prevent fraud, abuse and security incidents;
• comply with applicable laws and enforce our agreements; and
• market or promote our services and products (if you have not opted out of our marketing and promotional communications).

4 How we share information

We do not sell your personal information, and we do not share it for targeted or cross-context behavioral advertising. We share it only with:

• Service providers who process it on our behalf, under contracts that limit their use of it:
  • DigitalOcean, which hosts our servers and databases;
  • Cloudflare, which delivers and protects the website and so handles every request to it;
  • Stripe, which processes payments (Section 5);
  • Postmark, which delivers our emails.
• Legal and safety recipients, to comply with the law, respond to lawful requests, enforce our Terms, or protect rights and safety;
• Parties to a corporate transaction, such as a merger, financing or sale of assets, under confidentiality obligations; and
• Others, at your direction.

5 Payment processing

Subscriptions are processed by Stripe. Stripe collects your card details directly, under its own terms and privacy policy; your card number never reaches our servers. We generally store only the customer and subscription identifiers Stripe assigns, your plan, your subscription status and your renewal date.

6 Private by default

The Platform has no public profiles and no public feed.

Some tools, such as Chart Lab, let you copy a link that reproduces what you are looking at. That link contains the chart’s settings, not your account details, and anyone who has it can open it. We recommend that you do not put personal information into anything you share.

7 Data retention

Except as otherwise permitted or required by applicable law or regulation, we will retain your personal information for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal, accounting, or reporting obligations, or as necessary to resolve disputes. Otherwise, we generally follow the following internal retention policies:

• Your account and content are kept while your account is open. You can ask us to delete your account at any time by emailing us at the address in Section 13; we then delete it and the content in it within 30 days, except as described below. Ending a paid subscription does not delete anything.
• Inactive accounts: if an account without an active paid subscription has not been signed in to for 24 months, we may delete it and its content. We will email you at least 30 days before we do, and signing in during that time keeps the account.
• Waitlist entries are kept until we invite you or for 12 months, whichever comes first.
• Sign-in session records are deleted 90 days after they expire.
• Server logs are kept for up to 90 days.
• Billing and transaction records are kept for as long as tax and accounting rules recommend, typically seven years.
• Backups are overwritten on a rolling schedule, so deleted information can remain in them for up to 30 days.

8 Security

We use safeguards designed to protect your information, including encrypting traffic to the Platform, storing passwords only as one-way hashes, and leaving card data entirely with Stripe. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your password to yourself. You are responsible for all actions taken with your user name and password.

9 Where your information is processed

We are based in the United States, and your information is primarily stored and processed in the United States. Some of our service providers may process it in other countries, which may have different data-protection laws.

10 Emails from us

We send service emails, such as password resets and messages about your account, subscription and security, which you cannot opt out of while you have an account. If we send product news or other marketing, every message will include an unsubscribe link, and unsubscribing will not affect service emails. If you join the waitlist, we will email you when signup opens.

11 AI and your information

No feature of the Platform sends your personal information or your content to an artificial-intelligence service. The commentary in the Weekly Market Report is drafted with an AI model from market data and published news, then reviewed by a person; it uses no information about you. If we add a feature that does use your information with AI, we will update this Policy and give you any notice or choice the law requires first.

12 Children’s privacy

The Platform is for users who are at least 18 and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe a child has given us information, please contact us.

13 Third-party links, changes, and contact

The Platform links to third-party websites and services we don’t control, and this Policy doesn’t apply to them. We may update this Policy from time to time. When we do, we will revise the “last updated” date above and, for material changes, tell you through the Platform or by email.

Questions about this Policy can be sent to Tactical Asset Allocation, LLC at [email protected] or 3300 Highland Ave, Manhattan Beach, CA 90266.