Your data, explained in plain structure.

This Privacy Policy explains how TheAnalystAI ('we', 'us', 'our') collects, uses, and protects your personal information when you use our AI-powered investment research platform, including our website at theanalystai.com and all associated services such as AI research reports, Bot Studio, FactFlow, Edge Signals, and any mobile or desktop applications (collectively, the 'Service'). By using the Service, you consent to the practices described in this policy.

We collect information that you provide directly to us, as well as information collected automatically when you use the Service.

• Account information: name, email address, password (hashed), and profile preferences
• Research data: ticker symbols, asset queries, report generation history, saved watchlists, and research preferences
• Payment information: billing address and payment method details processed securely through our payment provider (Paddle). We do not store full card numbers
• Bot Studio data: trading strategies, bot configurations, paper trading results, and backtesting parameters
• Communication data: messages sent via contact forms, support tickets, and feedback submissions
• Usage data: pages visited, features used, session duration, device type, browser, IP address, and referral source
• Cookies and tracking: we use essential cookies for authentication, preference cookies for user settings, and analytics cookies to understand platform usage

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service, including generating AI research reports, executing bot strategies, and delivering Edge Signals
• To process transactions and manage your subscription
• To personalize your experience, including recommended tickers and tailored insights
• To improve and develop new features based on aggregate usage patterns
• To send transactional communications such as report completion notifications and account alerts
• To send marketing communications (only with your consent; you may opt out at any time)
• To detect, prevent, and address fraud, abuse, and security issues
• To comply with legal obligations and enforce our Terms of Service

Our Service uses artificial intelligence to generate investment research reports and trading signals. Important details about how AI interacts with your data:

• Your research queries are processed by our AI models to generate reports. These queries are not used to train or fine-tune our AI models
• Generated reports are stored in your account and are accessible only to you unless you choose to share them
• Bot Studio strategies and trading data are isolated per user. No cross-user data sharing occurs
• We may use anonymized, aggregated data to improve the quality and accuracy of our AI models
• AI-generated research is for informational purposes only and does not constitute financial advice

We do not sell, rent, or trade your personal information to third parties. We may share your data in the following limited circumstances:

• Payment processors: Paddle processes your payment information under their own privacy policy
• Cloud infrastructure: Google Cloud Platform and Firebase host our services with enterprise-grade security
• Analytics providers: we use privacy-respecting analytics to understand platform usage
• AI model providers: research queries are sent to AI providers (such as OpenAI, Anthropic) for report generation, subject to their data processing agreements with us
• Legal requirements: we may disclose information if required by law, subpoena, or government request
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction

We implement robust security measures to protect your data:

• All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption
• Authentication is managed through Firebase Authentication with support for multi-factor authentication
• Access to production systems is restricted to authorized personnel with role-based access controls
• We conduct regular security assessments and penetration testing
• Database backups are encrypted and stored in geographically distributed locations
• We maintain an incident response plan and will notify affected users within 72 hours of a confirmed data breach

We retain your data for as long as your account is active or as needed to provide the Service:

• Account data is retained until you delete your account
• Research reports are retained in your account indefinitely unless you delete them
• Bot Studio trading history is retained for the lifetime of your account for auditing purposes
• Payment records are retained for 7 years as required by tax and accounting regulations
• Server logs and analytics data are retained for 90 days
• Upon account deletion, your personal data is permanently removed within 30 days, except where retention is required by law

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your personal data ('right to be forgotten')
• Portability: request your data in a structured, machine-readable format
• Restriction: request that we limit the processing of your data
• Objection: object to the processing of your data for certain purposes
• Withdraw consent: withdraw consent for marketing communications at any time

To exercise any of these rights, contact us at contact@theanalystai.com. We will respond within 30 days.

TheAnalystAI operates globally. Your data may be transferred to and processed in countries other than your country of residence, including the United States and the European Economic Area. We ensure that appropriate safeguards are in place for all international data transfers, including Standard Contractual Clauses where required by GDPR.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the 'Last updated' date. For significant changes, we will also send you an email notification. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: contact@theanalystai.com
• Website: theanalystai.com/contact