Privacy Policy
Effective Date: August 12, 2026
ALGORA1, LLC ("ALGORA1," "we," "us," or "our") operates the ALGORA1 Terminal, a subscription web application that provides real-time market data, charting, and proprietary informational market studies for U.S. equities (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
We collect only the information necessary to operate the Service, manage your account and any credit you purchase, and provide the features you use. We do not sell personal data. The Service does not open or custody brokerage accounts, hold funds or securities, or perform any account-opening function, and we therefore do not collect KYC information, Social Security numbers, or bank account details. One optional feature is different from the rest and is described throughout this policy: if you choose to connect a brokerage account under Section 7B of our Terms, we hold an encrypted credential for that account and submit orders to that brokerage on your instruction. Nothing in this paragraph applies until you connect one. The Service sends no market notifications of any kind. We do not collect a mobile number and the Service does not send text messages. We send email only for account purposes - a password-reset link you asked for, and billing correspondence from our payment processor.
1. INFORMATION WE COLLECT
Account Information. You may create an account either by signing in with Google or by choosing a username and password. If you sign in with Google we receive from Google your email address, name and profile picture, and a stable account identifier; we never receive or store your Google password. If you register with a password we store your username, your email address, and a cryptographic hash of your password computed with a per-password random salt - we do not store the password itself and cannot recover it. Your email address is collected for one purpose: without it a forgotten password cannot be reset and an operator would have to intervene by hand. We also store a display name derived from your email address, and the customer identifier and checkout email required to verify and manage any credit you purchase.
Billing Information. The Service is a paid monthly subscription, and additional AI credit may be purchased on top of it; both are processed by our third-party payment processor — the subscription as a recurring charge, credit as one-time payments. Your payment card details are collected and stored by that processor, not by ALGORA1. We receive limited billing information such as your customer identifier, payment status, and the email associated with checkout.
Terminal Data. We store the terminal state tied to your account — your saved watchlist, your chart drawings, your ticker highlights, your display preferences, and any algorithms or static baskets you have built and saved — so your workspace is restored when you sign in, including on another device.
Feedback You Send Us. If you submit feedback or a bug report from within the terminal, we store your message, your username, and which ticker you were viewing at the time, and we forward it by email to our support address so that we can respond. We use it to support you and to fix the Service, not for marketing.
Technical & Session Data. We may collect your IP address, device and browser type, connection metadata, and server logs for security, fraud prevention, and service reliability. To enforce one account per subscriber, we store alongside your session a network prefix DERIVED from your IP address — the first three groups of an IPv4 address, or the first three groups of an IPv6 address — rather than the full address, and compare it when the account is used from another network. Concurrent use from the same network (several windows, or a desktop and a laptop behind one router) is permitted; a sign-in from a clearly different network takes over the session.
Brokerage Connection — only if you create one. If, and only if, you connect a brokerage account under Section 7B of the Terms, we store the credential that authorises that connection, ENCRYPTED, together with that account's endpoint or (for a SnapTrade connection) the identifier of the account you linked, the guardrails you configure, any basket you ask us to keep balanced, and a record of every order proposed, placed, refused, blocked, or rejected on that account. The credential is never returned to your browser and is deleted when you disconnect. WE NEVER RECEIVE YOUR BROKERAGE PASSWORD BY EITHER ROUTE: for a DIRECT connection (Robinhood, Webull, Public.com) you sign in at the brokerage itself or supply a credential it issued you; for a SNAPTRADE connection (Alpaca, Tradier, tastytrade, E*TRADE, Charles Schwab, moomoo, TradeStation) you sign in on SnapTrade's own pages, SnapTrade holds the brokerage connection, and what we store authorises us to SNAPTRADE rather than to your brokerage. SnapTrade is an independent third party with its own terms and privacy policy; it can read the account you connect and it carries the orders we submit.
We do NOT collect Social Security numbers, tax identifiers, dates of birth, or bank account information, because the Service provides no custody, account-opening, or funding functions.
2. HOW WE USE INFORMATION
We use collected information to: operate, maintain, and secure the Service and your account; authenticate you and manage your access and any purchased credit; restore and operate your terminal workspace; where you have connected an account under Section 7B, read that account and submit the orders you or your configured limits authorize, and keep the record of them; respond to feedback and support requests you send us; detect and prevent fraud, abuse, and unauthorized account sharing; improve the Service through aggregated, de-identified analytics; and comply with applicable legal and regulatory obligations.
3. INFORMATION SHARING
We do not sell, rent, or trade personal data. We share information only with: our payment processor, to process credit purchases; Google, solely to authenticate your sign-in; our hosting and infrastructure providers, who process data on our behalf under contract to run the Service; our transactional email provider, used to forward feedback you send us to our support address; your connected brokerage, but only if you have connected an account, and only the order instructions and account queries the Service makes on your behalf under Section 7B; Anthropic, PBC, as described in the next paragraph; and legal or regulatory authorities, when required by law or to protect our rights, our users, or the public. Our market-data and historical-data vendors receive only ticker symbols and never your identity, account, or contact details. Our internal operational monitoring receives service telemetry such as error text and load metrics, not account data.
TWO FEATURES TRANSMIT TO ANTHROPIC, PBC, AND ONLY THESE TWO. The ALGORITHM BUILDER (Terms Section 7A) transmits ONLY the messages you type into it - your strategy or your description of the portfolio you want - and never your username, email address, payment reference, watchlist, or any other account data alongside them. The BROKERAGE AGENT (Terms Section 7B), if and only if you have connected an account, transmits in addition INFORMATION ABOUT THAT ACCOUNT - balances, buying power, positions, order history, and the contents of any strategy brief you share with it - because it cannot act on an account it cannot read. YOUR BROKERAGE CREDENTIAL IS NEVER TRANSMITTED TO ANTHROPIC: it stays on our servers and is used only to make the request to that brokerage. If you never connect an account, no account data of yours reaches any artificial-intelligence provider. No other feature of the Service transmits anything to one: briefs and reports are generated on our own servers.
4. DATA STORAGE AND SECURITY
Data is stored on secured cloud infrastructure with industry-standard safeguards, including encryption in transit (TLS), restricted access controls, and hardened, HttpOnly session cookies. Passwords, where you set one, are stored only as a salted cryptographic hash (scrypt), never in a readable form. If you ask to reset a password we email a single-use link that expires after one hour; the link's token is itself stored only as a hash, and completing a reset invalidates every outstanding link for that account, so one that was forwarded or logged in transit cannot be replayed afterwards. If you sign in with Google there is no ALGORA1 password at all. A brokerage credential, if you have connected an account, is additionally encrypted at rest under a dedicated key, is never returned to your browser or shown to you again, and is deleted when you disconnect. No system is fully secure, we cannot guarantee absolute security, and storing a credential capable of placing orders carries risk you accept by connecting an account.
5. DATA RETENTION
We retain your information for as long as your account remains active and as needed for legal, regulatory, operational, and dispute-resolution purposes. The record of orders proposed, placed, refused, blocked, or rejected on a connected account is append-only and is retained after you disconnect that account, because it is the evidence of what was done in your name; the credential itself is deleted at disconnection. Sessions do not expire on their own; a sign-in from a clearly different network ends the session held elsewhere. When you delete your account, we remove eligible personal data within a reasonable timeframe, subject to any retention obligations. We may retain aggregated or de-identified data.
6. YOUR RIGHTS
Depending on your jurisdiction, you may access the personal data we hold about you, request corrections, request deletion (subject to legal retention requirements), export your account data, and opt out of non-essential communications. To exercise these rights, contact us at official.admin@algora1.com.
7. COOKIES AND TRACKING
We use a single essential first-party session cookie required for authentication and core functionality. Disabling it will prevent sign-in. We do not use third-party advertising cookies or cross-site tracking.
8. THIRD-PARTY SERVICES
The Service relies on third-party providers, including our market-data provider(s), historical-data providers, payment processor, transactional email provider, hosting provider, our artificial-intelligence provider (Anthropic, PBC), and — only where you have connected an account — that brokerage. Each operates under its own terms and privacy policies, and we are not responsible for their data practices, accuracy, or availability. Anthropic's processing and retention of what is sent to it are governed by its own commercial terms; your relationship with your connected brokerage, including its agreement with you and its handling of your account, is entirely between you and that brokerage.
9. CHILDREN'S PRIVACY
The Service is not intended for individuals under 18, and we do not knowingly collect personal data from minors.
10. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)
California residents may request access to, deletion of, or disclosure about the personal information we collect. We do not sell or share personal information as those terms are defined under California law.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Updates will be posted with a revised effective date, and material changes may be communicated by email or in-Service notice.
12. CONTACT
Questions about this Privacy Policy may be directed to official.admin@algora1.com.
Securities trading involves substantial risk of loss. Market data is provided for informational purposes only and may be delayed. ALGORA1 is a technology and market-data provider; it is not a broker-dealer or a registered investment adviser, it does not custody your funds or securities, and the Service does not provide personalized investment advice. Where you have connected your own brokerage account, ALGORA1 submits orders to that brokerage at your instruction; the brokerage executes and clears them, and you remain responsible for them.