Privacy Policy

Last updated: June 2026

1. Overview

AlphaBrief ("we", "us", or "our") is a stock research tool operated at alphabrief.io. This Privacy Policy explains what data we collect, how we use it, and your rights around it. By using AlphaBrief, you agree to the practices described here.

2. Information We Collect

Account data. When you sign up, we collect your email address and, if you use Google Sign-In, your Google profile name and email. This is handled by Supabase Auth.

Usage data. We log the tickers you search, your watchlist, and feedback you submit (thumbs up/down on stock briefs). This helps us improve the product.

Payment data. If you subscribe to AlphaBrief Pro, your payment is processed by Lemon Squeezy. We do not store credit card numbers. We receive a subscription status and customer ID from Lemon Squeezy.

Device/technical data. Like most web applications, we receive your IP address, browser type, and referring URL when you access the service. We do not run third-party advertising trackers.

3. How We Use Your Information

We use your data to:

  • Provide and operate the AlphaBrief service
  • Send thesis-change email alerts (Pro users who opt in)
  • Send your daily morning brief emails (if enabled)
  • Manage your subscription and billing via Lemon Squeezy
  • Improve the product based on aggregate usage patterns
  • Respond to support requests

We do not sell your personal data to third parties. We do not use your data to train AI models.

4. Third-Party Services

AlphaBrief integrates with the following third-party services. Each has its own privacy policy:

  • Supabase — authentication and database hosting
  • Finnhub — stock market data (tickers you search are sent to their API)
  • Massive.com — real-time and historical stock price data
  • Anthropic Claude — AI-generated stock analysis (ticker and market data is sent; no personal data is sent)
  • Lemon Squeezy — subscription billing and payments
  • Resend — transactional email delivery
  • Vercel — application hosting and edge infrastructure

5. Data Retention

We retain your account and watchlist data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required by law (e.g., billing records).

6. Cookies & Local Storage

We use browser localStorage to cache stock card data (for performance) and store your session token. We use Supabase cookies for authentication. We do not use third-party advertising cookies.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise these rights or request account deletion, email us at support@alphabrief.io.

If you are in the European Economic Area (EEA), you have rights under GDPR. If you are in California, you have rights under CCPA.

8. Security

We use industry-standard measures including HTTPS encryption, Supabase row-level security, and server-side API key management. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children

AlphaBrief is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such data, please contact us immediately.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by a notice in the app. Continued use after changes constitutes acceptance.

11. Contact

Questions? Email support@alphabrief.io.