Legal and privacy
Alpha Call Privacy Policy
This policy explains how Alpha Call collects, uses, stores, and protects user information and how you can exercise your rights.
1. Scope and controller
This policy applies to the Alpha Call website, accounts, and related product features. The controller is the Alpha Call product operator. Privacy questions and data rights requests can be sent to [email protected].
Third-party websites, X/Twitter, Google, and other external services have their own privacy practices. This policy does not replace them.
2. Information we collect
- Account and authentication information: email address, hashed password, email verification status, and short-lived verification codes and expiry times. We do not store readable plaintext passwords.
- Google sign-in information: with your authorization, we receive a Google account identifier, email address, and email verification status. We do not receive your Google password.
- Product usage information: product events you initiate, such as entry points, search selections, market or time filters, claim selections, and sign-in method. When PostHog is enabled, an account identifier and email are also used to recognize the same signed-in user.
- Device and log information: IP address, browser and device information, request time, path, status code, response duration, request identifiers, crash reports, and performance diagnostics.
- Feedback information: the content and category of feedback, whether you request contact, and necessary account-linked information.
- Public-source information: public X/Twitter profile information, public posts, public market claims, news, and market data. This information is used to build market research content and is separate from your account information.
3. How we use information
- Create and maintain accounts, verify email, manage sign-in and sessions, reset passwords, and confirm identity.
- Provide market research, asset discovery, claim evidence, observation scope, and related features.
- Protect accounts and the service through access control, rate limiting, abuse prevention, and troubleshooting.
- Understand product usage and improve interaction and reliability. We do not use PostHog to record passwords, verification codes, full post text, full claim text, or internal administrative actions.
- Meet legal obligations, handle complaints, and protect users, third parties, and Alpha Call.
5. Processors, sharing, and disclosure
We do not sell your personal information. To operate the service, we provide limited information to the following providers only as needed and require processing for the agreed purposes:
- Google: Google OAuth sign-in and account authentication.
- Email providers such as Resend: send verification codes, password reset messages, and necessary account email.
- Cloud hosting, database, and cache providers: run the application, store account and product data, and support security and performance controls.
- PostHog: product usage analytics and signed-in user identification.
- Sentry and logging providers: error monitoring, low-sample performance tracing, and troubleshooting. Sensitive-field scrubbing is configured, and we do not intentionally send passwords, verification codes, cookies, tokens, or request bodies.
6. Processing public-source information
Alpha Call organizes public creator profiles and market claims within a reasonable scope for search, extraction, classification, evidence display, and historical verification. Public information may still relate to an individual. Creators may request correction, supplementation, deletion, or object to processing through the email in this policy. We will evaluate requests based on the source, product purpose, public interest, and applicable law.
7. Retention
- Account information is generally retained while the account remains active. After deletion, limited records may be retained only as needed for legal obligations, disputes, abuse prevention, or security.
- Email verification codes are valid for 10 minutes and are removed from the account record after successful verification.
- Access logs, analytics, and error data are retained for the shortest reasonable period needed for security, diagnostics, and product analysis. Exact periods may depend on provider configuration and legal requirements.
- Public market research material is retained as needed for research history and evidence traceability. If a source is removed or we receive a valid rights request, we will assess whether it should be updated or removed.
8. Information security
We use technical and organizational measures appropriate to the product, including password hashing, access control, rate limiting, log redaction, error-data scrubbing, and transport protection. No internet service is perfectly secure. If an incident may affect your rights, we will take remedial and notification steps required by applicable law.
9. Your rights
Depending on applicable law, you may request access, a copy, correction, supplementation, or deletion of personal information, withdraw consent-based processing, close your account, or request an explanation of our practices. Email [email protected]. We may ask you to verify your identity to protect the account.
Withdrawal does not affect processing that occurred before withdrawal. Deleting information required for an account may prevent us from continuing to provide sign-in or related features.
10. Children
Alpha Call is intended for users aged 18 or older and is not directed to children. If we learn that we collected a child's account information by mistake, we will verify the situation and take appropriate steps, including deletion.
11. International processing
Google, PostHog, Sentry, email, and cloud infrastructure used by Alpha Call may process data outside your country or region. We will apply safeguards required by applicable law and complete separate consent, contractual, or other procedures before processing where required.
12. Updates and contact
We may update this policy as the product, providers, or law changes. The updated version and effective date will be posted here. We will provide reasonable notice of material changes and request renewed affirmative consent where required.
Send privacy questions, complaints, and data rights requests to [email protected].