Privacy Policy

1. Introduction

AlfinaAI (“Company,” “we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our platform, and access our AI-powered stock analysis and investment thesis services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide Directly

Account information

• Name, email address, and password when you create an account
• Optional profile information (investment experience level, interests, portfolio size)
• Contact information when you reach out to support

Subscription and payment information

• Billing address and payment method details (processed by secure third-party processors; we do not store full card numbers)
• Subscription tier and usage history

Analysis and usage data

• Stock symbols you search for and analyze
• Stocks you add to watchlists or portfolios
• Your analysis queries, filters, and preferences
• Investment theses, reports, and exports you generate

Communications

• Emails, messages, and support tickets you send us
• Survey responses and feedback

2.2 Information Collected Automatically

Device and browser information

• IP address
• Browser type and version
• Operating system
• Device identifiers
• Referring URL

Usage analytics

• Pages visited, time on page, and features used
• Clicks, interactions, and navigation flows
• Search queries and analyses performed
• Error logs and performance metrics

Cookies and similar technologies

• Session cookies for authentication and security
• Performance and analytics cookies (e.g., Google Analytics)
• Third‑party cookies from services we integrate
• Local storage for user preferences

2.3 Information from third parties

We may receive information from:

• Payment processors (transaction confirmations, fraud screening)
• Analytics providers (usage patterns, device data)
• Data brokers and public sources (optional enrichment)
• Social login providers, if you sign in with an external account

3. How We Use Your Information

We use collected information to:

Core service delivery

• Provide stock analysis, visualizations, and investment thesis generation
• Operate and maintain your account and authentication
• Process subscriptions and payments
• Deliver reports and saved investment theses
• Personalize your experience and content

Communication

• Respond to support requests and questions
• Send transactional emails (confirmations, receipts, password resets)
• Send service and feature updates
• Send marketing communications, where permitted (you can opt out)

Analytics and improvement

• Understand usage to improve features and usability
• Monitor performance, reliability, and security
• Identify and fix bugs and errors
• Create anonymized, aggregated reports and statistics

Legal, compliance, and risk

• Comply with legal obligations and regulatory requests
• Enforce our Terms of Use and other agreements
• Detect, investigate, and prevent fraud, abuse, or security incidents

Machine learning and AI

• Train and improve our analysis and thesis‑generation models
• Improve personalization and ranking of results

4. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share information as follows:

AI Model Training

• Your analysis queries and stock selections may be used to improve our models
• Inputs are anonymized and do not contain personally identifiable information
• You can opt out of model training in account settings

4.1 Service providers

• Stripe, Inc. — payment processing and subscription management. Stripe is a PCI-DSS Level 1 certified processor. AlfinaAI does not store, transmit, or have access to your full card number or CVV. Payment data is handled directly by Stripe and governed by Stripe’s Privacy Policy.
• Email providers for transactional and marketing communications
• Analytics providers for usage and performance insights
• Cloud hosting platforms (including OCI and similar providers)
• Financial data and market‑data APIs used to power analysis

These providers are contractually restricted to using data only to provide services to AlfinaAI.

4.2 Legal and regulatory requirements

• Law enforcement or regulators where required by law
• To protect the rights, property, or safety of AlfinaAI, our users, or others

4.3 Business transfers

If AlfinaAI is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you of any material change.

4.4 Aggregated and anonymized data

We may share aggregated, de-identified statistics and insights that cannot reasonably be used to identify you.

4.5 With your consent

We may share information for other purposes with your explicit consent.

5. Data Retention

When you delete your account, we remove or anonymize associated personal data within 30 days, except where we are legally required to retain it.

6. Security

We implement industry-standard security measures:

• Encryption: TLS/SSL for data in transit; AES-256 for sensitive data at rest
• Authentication: Multi-factor authentication (MFA) available
• Access controls: Role-based access, least-privilege principle
• Infrastructure: SOC 2 Type II compliant hosting (OCI/AWS)
• Monitoring: Real-time threat detection and intrusion prevention
• Regular audits: Quarterly security assessments and penetration testing

Important: No security is 100% guaranteed. We cannot warrant absolute security, but we maintain reasonable safeguards.

7. Your Privacy Rights & Choices

7.1 Data Access & Portability

• Request a copy of your personal data in a portable format
• Contact: support@alfina.ai with subject “Data Access Request”

7.2 Correction & Deletion

• Update inaccurate information in your account settings
• Request permanent deletion of your account and associated data
• Contact: support@alfina.ai with subject “Account Deletion Request”

7.3 Opt-Out & Preferences

• Unsubscribe from marketing emails (link in email footer)
• Disable non-essential cookies in browser settings
• Opt-out of analytics tracking (some tracking may remain for security)

7.4 California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information is collected and shared
• Delete personal information (with exceptions for legal compliance)
• Opt-out of data sales (we don't sell data, but this confirms our practice)
• Non-discrimination for exercising privacy rights

Requests: support@alfina.ai (response within 30 days)

7.5 European Privacy Rights (GDPR)

If you are an EU resident, you have the right to:

• Access, correct, or delete your personal data
• Request data portability
• Withdraw consent for data processing
• File complaints with your local data protection authority

Requests: support@alfina.ai (response within 30 days)

7.6 Nevada Privacy Rights

Nevada residents may opt-out of the sale of covered information. We don't sell data, but to exercise this right, contact: support@alfina.ai

8. Cookies & Tracking Technologies

8.1 Types of Cookies We Use

8.2 Cookie Management

• Most browsers allow you to refuse cookies or alert you when cookies are set
• Disabling cookies may affect platform functionality
• You can clear cookies in browser settings anytime

8.3 Third-Party Cookies

We use Google Analytics (Google LLC). Google may set cookies on your device. See Google's Privacy Policy and Opt-Out Options.

9. Third-Party Services & External Links

Our platform integrates with external APIs and services:

Payment Processing:

• Stripe, Inc. processes all payments on AlfinaAI. Stripe operates independently under its own Privacy Policy. We share only the information necessary to complete your transaction (billing address, email). We never transmit your full card details to our servers — they go directly to Stripe.

Financial Data Providers:

• Market data APIs (Alpha Vantage, IEX Cloud, Finnhub, etc.)
• These services have their own privacy policies; we are not responsible for their practices

External Links:

• Our site may link to third-party websites
• We are not responsible for third-party privacy practices
• Review their privacy policies independently

10. Children's Privacy

alfina.ai is intended for adults 18+ only. We do not knowingly collect data from children under 13. If we discover we have collected data from a child, we will delete it immediately.

Parents/guardians concerned about data collection: contact support@alfina.ai

11. International Data Transfers

Your data may be processed and stored in the United States, EU, or other jurisdictions. By using alfina.ai, you consent to such transfers. We ensure adequate protections (Standard Contractual Clauses, BCRs, or other legal mechanisms) for international transfers under GDPR.

12. Privacy Policy Updates

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via:

• Email notification
• Prominent notice on our website
• Updated “Last Updated” date at the top of this policy

Continued use of alfina.ai after updates constitutes acceptance of the revised policy.

13. Contact Us

For privacy questions, requests, or concerns:

Email: support@alfina.ai
Mailing Address:
alfina.ai
Oakhurst, New Jersey, USA

Response Time: We respond to verified requests within 30 days.

14. California Privacy Notice (CCPA Summary)

Categories of Personal Information Collected:

• Identifiers (name, email, IP address)
• Commercial information (subscription tier, payment history)
• Activity data (searches, analyses, usage patterns)
• Device information (browser, OS, device ID)
• Inferred characteristics (investment preferences, interests)

Uses:

Service delivery, analytics, compliance, marketing, fraud prevention

Sharing:

Payment processors, analytics providers, cloud hosting, legal compliance (no sales)

Your Rights:

Access, delete, opt-out, non-discrimination

Contact:

support@alfina.ai

15. Acknowledgment

By using alfina.ai, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.