Legal
Privacy notice
We collect as little as possible and never sell personal data.
Draft — for review by counsel. This document is a working draft and has not been reviewed by a lawyer. No legal entity or regulatory registration is claimed.
What we collect
- Account data: name, email address, a password hash (never the password itself), roles, and sign-in/session records including IP address and user agent for security.
- Contact messages: name, email and message content you submit, with your consent.
- Activity in the terminal: actions such as research requests, order proposals and approvals are written to an audit log to keep the system safe and accountable.
What we don't do
- No advertising trackers or sale of personal data.
- No collection of bank, card or brokerage credentials. Broker access uses a paper account configured by the operator.
Cookies
A single essential, HttpOnly session cookie keeps you signed in. No analytics or marketing cookies are set.
AI processing
By default the research model runs locally. If a hosted model provider is enabled, market and research context may be sent to it; personal account data is not.
Retention and your rights
You may request access to, correction of, or deletion of your personal data via the contact form. Audit records required for system integrity may be retained.
Security
Passwords are hashed with a memory-hard function; sessions are opaque, server-validated and revocable; access is role-based and enforced on the server.
Controller: to be specified before publication.