Algovest Privacy Policy

Last updated: June 27, 2026 · Effective: June 27, 2026

This Privacy Policy explains how Section 44 LLC, doing business as Algovest ("we," "us," "our"), collects, uses, shares, and protects information when you use the Algovest mobile app, the website at tradealgovest.com, and related services (collectively, the "Service").

We respect your privacy. We collect the minimum information necessary to operate the Service. We do not sell your personal information.

Plain-language summary (informational only — the binding text is below): we collect your email and account details, in-app activity needed to compute and display signals, basic device diagnostics for crash reporting, and — only if you connect a brokerage account — the OAuth tokens and account identifier required to route trades. We never sell your data. You can request a copy or deletion at any time.

1. Who We Are

Section 44 LLC operates the Service under the brand name "Algovest." For the purposes of the EU/UK GDPR and the California Consumer Privacy Act (CCPA/CPRA), Section 44 LLC is the data controller of personal information you provide directly to us. Our data protection contact is privacy@tradealgovest.com.

2. Information We Collect

2.1 Information you provide directly

Account information: email address, password (stored only as a salted hash), display name (optional).
Profile preferences: notification settings, watchlists, saved strategies, time-zone, locale.
Brokerage authorization (only if you connect a broker): the OAuth access token and refresh token issued by your broker, the account identifier returned by your broker, and the scope of permissions you granted. We never receive your broker password or login credentials.
Support communications: if you contact us at support@tradealgovest.com, the contents of your message and the email address you sent it from.

2.2 Information collected automatically

App usage: which screens you visit, which agents and strategies you create, which signals you tap into. We use this to compute personal performance metrics and to improve the product. We do not use it to build advertising profiles.
Device and diagnostic data: iOS version, device model, app version, anonymized session identifiers, and crash logs. We use Sentry, Inc. to capture crash reports; Sentry receives these signals scoped to crash diagnostics only.
Web analytics (landing page only): if you visit tradealgovest.com, we may collect aggregated, cookie-less analytics (e.g. pageview counts) using a privacy-respecting analytics provider. We do not place cross-site tracking cookies.

2.3 Information we generate

Signals and decisions: the algorithmic output of agents and strategies you have configured, computed from public market data and the parameters you set.
Audit trail: every evaluation that touches your account, retained for transparency, debugging, and your own audit/drill-down. This includes the input data the agent saw at evaluation time.

2.4 Information we do not collect

We do not collect your social security number, government identifiers, or biometrics.
We do not collect financial account balances from any source other than the broker you have explicitly connected, and only via the OAuth scope you authorized.
We do not collect contacts, photos, location, microphone, or camera data.

3. How We Use Information

We use the information described above to:

Operate the Service — authenticate you, render your strategies and signals, deliver notifications you have opted into.
Compute signals and outcomes — feed your configured agents with the data they evaluate, and compute the performance metrics you see in the app.
Route trades you have authorized — when you have connected a broker and explicitly enabled execution for a strategy, transmit the resulting orders to your broker via that broker's API using the OAuth token you authorized.
Support and respond to you — answer your questions and resolve issues you report.
Detect abuse and fraud — detect and prevent unauthorized access, abusive use, and security incidents.
Improve the Service — diagnose bugs, measure feature adoption in aggregate, and prioritize the roadmap. Aggregated and de-identified data is also used for internal product analytics.
Comply with law — meet our legal obligations and respond to lawful requests.

We do not use your information for advertising. We do not use your information to train third-party machine-learning models. We do not use your information to make automated decisions that produce legal effects on you.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, our lawful bases for processing your personal information are:

Performance of a contract — to provide the Service you have signed up for.
Legitimate interests — to keep the Service secure, prevent abuse, and improve our product. We have weighed these interests against your privacy and only rely on this basis where the processing is necessary and not outweighed by your rights.
Consent — for any optional processing (e.g. email notifications). You can withdraw consent at any time.
Legal obligation — to respond to lawful requests and meet regulatory requirements.

We share personal information only as described below:

Service providers (processors). We use the following processors to operate the Service. Each is bound by a data-processing agreement and may use your information only to deliver the service we contract for:
- Databento, Inc. — market data.
- Alpaca Securities, LLC — brokerage execution if you connect a broker.
- Apple Inc. — App Store distribution, Sign in with Apple (if you use it), Apple Push Notification service.
- Sentry, Inc. — crash and error reporting.
- Cloud infrastructure provider — virtual machines, managed Postgres, object storage. (Details published on the tradealgovest.com/changelog if and when we change provider.)
- Email delivery provider — transactional and account email.
In response to legal process. We may disclose information when required by law, subpoena, or court order, or to protect the rights, property, or safety of Algovest, our users, or the public. We will challenge requests we believe are overbroad and notify you when legally permitted.
Business transfers. If Algovest is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you and provide an opportunity to delete your account before any transfer of personal information takes effect.

We do not sell personal information for monetary or other valuable consideration, and we do not "share" personal information for cross-context behavioral advertising under the CCPA/CPRA.

6. International Transfers

We are based in the United States and process information in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. We rely on the EU Standard Contractual Clauses or equivalent legal mechanisms for any transfer of personal data from the EEA, UK, or Switzerland to the United States.

7. Data Retention

Account information: retained while your account is active and for up to 90 days after deletion to satisfy backup-rotation cycles, fraud-prevention obligations, and tax recordkeeping.
Brokerage tokens: deleted immediately when you revoke a connection or delete your account.
Audit-trail data: retained for at least 7 years to meet recordkeeping standards typical for financial-data services. You can request deletion subject to legal retention obligations.
Crash reports: retained for 90 days by our error-reporting processor.
Backups: rotated on a 30-day cycle; deleted records persist in backups only until that rotation completes.

8. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including:

Encryption in transit via TLS 1.2+ for all client-server communication.
Encryption at rest using AES-256-GCM for sensitive fields (broker OAuth tokens) using keys held only in environment variables, never in the database.
Access controls — least-privilege role-based access for our team, with audit logging for any access to user data.
Secret management — credentials stored only in environment variables, never in source control or in the database.
Continuous monitoring — automated security monitoring and incident response procedures.

No system is perfectly secure. If we discover a security incident affecting your information, we will notify you without undue delay as required by applicable law.

9. Your Rights and Choices

Depending on where you live, you have some or all of the following rights regarding your personal information:

Access — request a copy of the personal information we hold about you.
Correction — ask us to correct inaccurate information.
Deletion — ask us to delete your account and personal information (subject to legal retention obligations).
Portability — receive your information in a machine-readable format.
Restriction — ask us to restrict certain processing.
Objection — object to processing based on legitimate interests.
Withdraw consent — for processing based on consent.
CCPA/CPRA-specific: non-discrimination for exercising your rights; the right to opt out of "sale" or "sharing" (we do neither, but you have this right by default).
GDPR-specific: the right to lodge a complaint with your supervisory authority.

To exercise any of these rights, email privacy@tradealgovest.com. We will respond within 30 days (or 45 days where law permits an extension). We may need to verify your identity before fulfilling certain requests.

You can also:

Manage notification preferences inside the app.
Revoke your brokerage connection from inside the app or from your broker's dashboard.
Delete your account from inside the app at any time.

10. Children's Privacy

The Service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, contact privacy@tradealgovest.com and we will delete it.

11. Cookies and Similar Technologies

The Algovest mobile app does not use third-party advertising cookies. The website at tradealgovest.com may use minimal first-party cookies for session management and privacy-respecting aggregated analytics; we do not use cross-site tracking pixels or behavioral-advertising cookies. You can disable cookies in your browser settings; the Service will still function, but some features may be limited.

12. "Do Not Track"

Algovest does not respond to "Do Not Track" browser signals because no industry standard exists for what that signal should require. We do not engage in cross-site behavioral tracking regardless of any DNT signal.

13. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email and/or in-app notice and update the "Last updated" date above. Your continued use of the Service after the changes take effect constitutes acceptance of the revised Policy.

14. Contact

Questions, concerns, or requests about your personal information?

Privacy contact: privacy@tradealgovest.com
Mailing address: Algovest, c/o registered agent (address on file with the State of Delaware).
EU/UK representative: if and when required, contact details will be published here.