Privacy Policy

What we collect

Account. Your email address and a hash of your password. We never store the password itself. If you signed up with an invite code, we record which code you used.

Investor profile. The answers you give during onboarding: risk tolerance, experience level, trading goal, and your paper-trading starting balance.

What you do in the app. Tickers you analyze and the analyses generated for you, paper trades and positions, journal entries, thesis reviews, your watchlist, and your scoreboard. This is the product — it exists so you can come back to it.

Technical data. The IP address and email on each login attempt (kept briefly to throttle brute-force attacks), a log of each AI model call made on your behalf (to enforce usage limits), and standard server request logs from our hosting provider.

Email preferences. Whether you opted into the weekly Tenet Brief, when we last sent it, and a one-click unsubscribe token.

We do not collect payment details (there is nothing to buy yet), brokerage credentials, real account balances, or real trades. Everything traded inside Tenet is simulated.

How we use it

• To run the app: log you in, generate analyses sized to your profile, track your paper portfolio.
• To send the emails you asked for: the weekly brief (opt-in), password resets, and account notices.
• To keep the service safe and solvent: rate limiting, abuse prevention, and per-user AI usage caps.
• To improve the product, using aggregate, de-identified usage patterns.

We do not sell your data, and we do not use it for advertising. We do not use your analyses, trades, or journal to train AI models.

Who we share it with

Tenet runs on a small set of infrastructure providers. Each one receives only what it needs to do its job:

• Anthropic — AI analysis (Claude models). Receives: fact sheets and your risk profile — never your email or password.
• Alpaca — market data. Receives: ticker symbols only — no personal data.
• Resend — transactional email. Receives: your email address and the contents of emails we send you.
• Neon — database hosting. Receives: everything in your account, encrypted at rest.
• Vercel — application hosting and logs. Receives: request logs, including IP address.

When the Tenet mobile app launches, in-app purchases will be processed by RevenueCat and the Apple App Store or Google Play; we will update this policy before that happens. We may also disclose data if required by law or to protect the rights and safety of users and the service.

Cookies

Tenet sets one cookie: the session cookie that keeps you logged in. There are no advertising or cross-site tracking cookies.

Retention and deletion

Your account data is kept as long as your account exists. Login-attempt records are short-lived and pruned automatically. To delete your account and everything in it, email yashrao2006@gmail.com from the address on the account; we will confirm and complete deletion within 30 days. Backups held by our database provider expire on their normal schedule after that.

Security

Passwords are hashed with bcrypt. All traffic is encrypted in transit (TLS) and data is encrypted at rest by our database provider. Login attempts are rate-limited per address and per account. No system is perfectly secure; if we learn of a breach affecting your data, we will tell you.

Age

Tenet is for adults. You must be at least 18 to create an account.

Changes

If this policy changes in a way that matters, we will email account holders before the change takes effect. The effective date at the top always reflects the current version.