Privacy Policy

What this product does with your data

You connect a brokerage account or upload a trade export. We analyze your trading history and let you talk to an AI coach about it. That is the entire purpose, and everything below follows from it.

What we store

Your account. Email address and a sign-in identity, managed by Clerk, our authentication provider. We never see or store your password.

Your profile. The rules you set (stop loss, profit target, intended hold) and anything you write in the free-text questions. The coach reads these.

Your trades. Every completed trade we derive from your history: symbol, entry and exit times, size, result. Plus the original file or export it came from, kept so we can re-process it if we improve the parser.

Your analysis. The statistical findings computed from your trades, and the profile settings they were computed against.

Your conversations. Every message you and the coach exchange, and any thumbs-up or thumbs-down you give a reply.

Your plans. The plan you write for a trading day - what you mean to trade, the rules for the day, an intention, notes - kept so the day can be read against it once your trades are in.

What the coach remembers. Notes the coach keeps between conversations about what you told it - about yourself, your goals, what you are working on - and the rules you committed to in conversation. All of it is shown to you on your profile under “What Cal remembers”, where you can remove any note, withdraw any commitment, or forget everything.

Your steps through the product. Which screens you reached and when: an onboarding screen left for the next, what you chose there and how long you spent on it, your profile saved, the sample record opened, an import started or finished, an analysis run or failed, the findings opened, a conversation started. Never what you typed. We use it to see where people get stuck, and nothing else.

Broker credentials. If you connect a broker, we store the credential that lets us read your history - an IBKR Flex token, or a SnapTrade user secret. These are encrypted at rest with a key only we hold. We never store your broker password. For brokers reached through SnapTrade, you sign in on their hosted page and they hold that session, not us.

What we do not do

• We do not place trades. Every broker connection is read-only by design, and there is no path in this product from a conversation to an order.
• We do not sell your data, share it with advertisers, or show ads.
• We do not train AI models on your data.
• We do not look at your trades or conversations unless you ask us to help with a problem.

Who else sees your data

To run the product, some data passes through other services:

Clerk

Email, sign-in identity

Authentication

Anthropic

Your findings, profile and conversation

Powers the coach. Under their API terms, not used to train their models.

Neon

Everything in “What we store” except raw files

Our database

Cloudflare R2

Your raw trade exports

File storage

SnapTrade

Your brokerage session, if you connect through them

Broker connectivity

Massive (market data)

Ticker symbols and dates, never your identity

Price context

Render, Vercel

Serve the application

Hosting

Sentry

When something in the product breaks: the error and where in the code it happened. Never your trades, your messages, your identity, your IP address or what you sent

Error reports, so we hear of a failure without you having to tell us

None of these receive more than they need for their job.

How long we keep it

As long as you have an account. Delete your account and everything above is deleted - your sign-in, your trades, analysis, conversations, profile, raw files, what the coach remembers, and broker credentials. Broker connections made through SnapTrade are revoked there too.

Two exceptions. Anthropic retains API inputs briefly for abuse monitoring under their own policy, which we do not control. And an error report at Sentry, which holds no data of yours - at most an opaque id of a run or a file - is kept there for thirty days.

Deleting your account

Profile page, bottom, “Delete my account.” It asks once, then asks you to confirm it is you - your password, or your second factor if you have one - and then it is gone, your sign-in with it. If your sign-in cannot be deleted at that moment, nothing is, and the page says so. There is no recovery, because there is nothing left to recover from.

Changes

If this policy changes in a way that matters, we will say so in the app before it takes effect.