[ Legal ]

Privacy policy

Effective July 9, 2026

The short version

We collect what running a subscription product requires, and nothing else. We do not sell your data, we do not run ads, and we never ask for brokerage credentials. Subscriptions are the entire business model.

What we collect

  • Account data — your email address, display name, and authentication records, stored with our database and auth provider (Supabase).
  • Product data — your onboarding answers, watchlist, manually logged positions, and alert preferences. This exists to tune your feed and is visible only to you.
  • Billing data — handled by Stripe. We store your Stripe customer id and subscription status; your card number never touches our servers.
  • Usage and logs — standard server logs (IP, user agent, timestamps) kept for security and debugging, retained briefly.

What we use it for

Operating the service: authenticating you, rendering your feed, sending the alerts and digests you asked for (delivered via Resend), processing payments, preventing abuse, and fixing bugs. That list is exhaustive.

What we never do

  • Sell, rent, or share your personal data with advertisers or data brokers.
  • Connect to your brokerage or ask for its credentials.
  • Use your positions or watchlist for anything other than rendering your own product experience.

Processors

Three third parties process data on our behalf: Supabase (database and authentication), Stripe (payments), and Resend (transactional email). Each receives only what its function requires. The product is hosted on Vercel.

Retention and deletion

Your data is kept while your account exists. Deleting your account from the account page cancels any active subscription, deletes your user record, and cascades deletion through your product data. Billing records required for tax and accounting compliance are retained by Stripe per its policies.

Cookies

The marketing site sets no tracking cookies. The app uses session cookies strictly for authentication.

Your rights

You can export what you gave us, correct it, or delete it — the first two by writing to us, the last self-serve from your account page. Depending on your jurisdiction (GDPR, CCPA, and similar), you may have additional statutory rights; requests to support@arcthane.com.

Changes

Material changes to this policy are announced by email or in the product before they take effect.