Privacy

An email address and a hash of your password. The password itself is never stored. Beside them: your plan, requested plan, and compile counts keyed by a hash of the sentence. A link to set a new password is only ever sent to the address on the account.

The email, the sentence and the plan you mention are kept until the request is approved or declined. Declined requests are deleted after 90 days.

The sentences you write and the contracts they compile to. Every strategy you write is kept under your account as you work, with nothing to press, and stays there until you delete it or delete your account. Nothing is removed on a timer. At most 200 workspaces are kept per account; past that, the oldest one you have not touched goes, and a strategy that is running, published or in your portfolio is never the one that goes.

The Portfolio keeps one pending book per account: the shares you gave each strategy before pressing Apply. Strategies you run on paper are kept with their schedule, their share of the account and the last decision they made.

Strategies you share or publish are public by design: the name, the sentence, the contract and the results Clause computed, at a link anyone can open. Published ones are listed on the Leaderboard as well.

If you connect Alpaca, we hold either the paper API key and secret you pasted or the token Alpaca issues when you connect through Alpaca. The secret and the token are encrypted at rest with a key held on the server, outside the database; the key id, which is not secret, is stored as it is. Disconnecting removes all of it. Connecting through Alpaca goes through Alpaca’s sign-in; orders only ever go to Alpaca’s paper endpoint.

Every order a running strategy places is written to an order log: the time, the strategy that placed it (an order combined across your whole book is logged under the book, not under one strategy), the symbol, the side, the size, the order’s status and the note that says which rule decided it. The log is kept by strategy name, not by account.

The sentence you compile is sent to Anthropic’s API to be turned into rules. Compiled sentences and computed backtests are cached by their content so the same sentence is not compiled or tested twice; those caches are not tied to your account and hold no personal data.

Account mail is sent by us, through Resend or from our own address. The mail log keeps the kind of mail and the time, never the address, the text or the link.

Network addresses are kept only as keyed hashes, for 24 hours, to limit abuse.

One cookie, clause_session, keeps you signed in for 30 days; the server keeps only a hash of it, and Sign out everywhere on the Account page ends every session at once. Browser storage keeps interface preferences only.

Vercel Analytics counts page views. It sets no cookie and there are no advertising trackers. We do not sell personal data.

On servers run by Fly.io and Vercel in the United States. The processors that handle data on our behalf: Fly.io, Vercel (hosting and Analytics), Anthropic, Alpaca and Resend.

Delete account on the Account page removes the account, its sessions, every strategy it holds, the pending book, the strategies running on paper and the broker credentials, in one step, after cancelling every open order on the connected paper account, including orders you placed by hand in Alpaca. It also removes the access request that brought you in, any invitation or password link, your plan request and your compile counts. Download everything on the same page gives you all of it first, the access request, the plan and the compile counts included.

Two things stay. Shared and published pages stay online without your name, because other people hold those links; you can take them off the Leaderboard as you delete. The order log keeps its rows, because it is kept by strategy name rather than by account.

To have what is held about you removed, delete the account from your Account page; everything above goes with it.