Privacy policy

Effective 5 September 2026 · Last updated 3 October 2026

1. Who we are

The Alpha Desk operates this service. The service's legal jurisdiction is Hong Kong. For privacy requests or questions, contact [email protected].

2. What we collect

• Applications: your name, email, intended use of the desk, approximate portfolio-value range in US dollars and any optional information you include. We use this to assess your application and reply; we do not add applicants to a marketing list.
• Account information: your name, email, securely hashed password, session records and licence status. We do not store your password in readable form.
• Profile: your country of residence and, for direct purchases, your approximate portfolio-value range in US dollars, plus your date of birth and investment interests if you choose to provide them. We also record your choice about product and research emails, when it changed and the consent wording version. Optional details and marketing consent are not required to use your licence.
• Conversations: the questions you send and the answers produced, including relevant holdings, assumptions and personal context you choose to give the desk. We store these against your account to provide history, support follow-up questions and check the quality of the desk's answers.
• Attachments: statements, documents, chart images and their processed content may be retained with the conversation so the desk can refer to them in follow-up questions. They follow the same retention and deletion cycle as that conversation.
• Billing: the agreed licence term and fee, currency, payment and order references, payment status and accepted payment-terms version. The payment provider receives the details you enter at checkout directly; we do not store card numbers.
• Order and human-service records: records of requested written reviews or human escalations, including the brief, status and when work began. For earlier orders with a usage-based refund allowance, we also retain per-order completed-answer counts, completion identifiers and timestamps. We use these records to administer the services and terms agreed for your order and resolve questions about the record.
• Technical and usage information: request times, IP addresses, browser information and service usage, used for security, reliability, abuse prevention and usage limits.

We also keep aggregate counts of public pricing views, term selections, signup and checkout steps, and fixed error categories to improve the purchase process. These counts may include a referrer domain, approximate country and device category. This measurement stores no names, email addresses, IP addresses, full URLs, form answers, persistent visitor identifiers or conversation content. Aggregate purchase counts are retained for 90 days; no new tracking cookies are used.

3. What we do not do

We do not sell personal information, share it with advertisers or data brokers, or use your conversations to train third-party models. We do not connect to your bank or brokerage accounts and never ask for their login credentials.

4. Why we use it

We use information to provide the service and administer your licence, respond to requests, maintain security and reliability, and check and improve answer quality. We also keep records needed to meet applicable legal and accounting obligations. Where consent is required for a particular use, you may withdraw that consent by contacting us.

Your profile supports account administration and helps us understand members' interests. It is not automatically added to chat requests or sent to the answer-generating model. If you separately opt in, we may email product updates and research relevant to your stated interests. You can withdraw this choice in your account at any time. Necessary account, licence and payment messages are separate from marketing.

5. Service providers and locations

• Hetzner Online GmbH: hosts the application and its stored data in Germany.
• Cloudflare: provides site delivery, TLS, security and the connection to our server. Cloudflare Web Analytics is enabled and collects technical page and performance information. It is performance analytics, not advertising.
• Google Workspace: handles email to and from the desk, including application replies, account support and password-reset messages. Email addresses and correspondence are processed through its service.
• Anthropic: generates the desk's answers. Your question, relevant conversation history, attachments and other context needed for the answer are sent to its service for processing.
• Market data providers: receive requested ticker symbols and market-data queries. We do not send them your customer identity or uploaded statements as part of those queries.
• Airwallex: hosts checkout and processes payments. It receives the customer details needed for the payment, the order reference, amount and currency. We receive payment references and status needed to issue and administer the licence. Subscription and renewal details are shown before payment and in your account.

Providers may process information in Germany, the United States and other locations where their services operate. Contact us if you need more detail about how your information is handled.

6. Retention and deletion

• Conversations and retained attachments: scheduled for removal in the nightly cleanup once a conversation has been inactive for 365 days, unless you delete it sooner. Expiry of a licence does not immediately delete the account or its conversation export controls.
• Rolling backups: server backups and private copies held off the server use a rolling 14-day retention schedule. Deleted records may remain in these copies. Copies older than 14 days are removed at the next successful backup rotation; if a backup job is unavailable, rotation resumes when it runs again.
• Account, profile and application information: retained to administer the account or application. Your account lets you edit and download your profile, clear optional profile details and withdraw marketing consent. We retain the current consent record to respect that choice. Contact us to request other corrections or deletion.
• Billing, order and security records: retained where needed to administer your order, meet applicable obligations, maintain security or resolve disputes. Human-service records follow these purposes. These records are separate from conversation history; deleting a conversation does not remove the order record or reset usage recorded under earlier agreed terms.

The account page lets you download retained conversations or delete the conversation history. Deleting that history does not close the account, end the licence or remove portfolio preferences. Contact us if you want those other records removed too.

7. Your choices and requests

You may ask us for a copy of your information, a correction, deletion or an explanation of a particular use. Additional rights may apply where you live, including rights to portability, restriction, objection and a complaint to a data protection authority.

Send requests to [email protected]. We aim to respond within 30 days and may need to verify that the request is yours. We do not treat you differently for making a privacy request.

8. Cookies and browser storage

Cookies keep your session signed in and support access controls. Browser storage remembers your theme and, for your signed-in account, research and portfolio preferences on that device. Signing out clears that account's local research and preferences. Conversation deletion clears its synced local history and saved answers while keeping portfolio preferences.

We do not use advertising cookies. Cloudflare's technical and performance processing is described above.

9. Security

Data is encrypted in transit and passwords are hashed. Production access is limited to people who need it to run the service. If a breach affects personal information, we will notify affected people and relevant authorities as required by applicable law.

10. Children

The service is for adults aged 18 or over. If you believe a child has provided personal information, contact us so we can investigate and remove it.

11. Changes and contact

We will publish updates here with a new date and notify you by email or in the product of material changes. Questions and requests go to [email protected].

Terms of service · Risk disclosures