Privacy Policy

1. Information We Collect

Alethiq Labs LLC is the data controller responsible for your personal information. Account information: When you create an account, we collect your name, email address, and phone number (if you opt into SMS alerts). Usage data: We collect anonymous usage analytics such as pages visited and feature interactions. Payment information: Payment details are processed and stored by Stripe. We do not store credit card numbers on our servers.

2. Brokerage API Credentials

If you connect a brokerage account to enable platform features, your brokerage credentials (such as API keys or OAuth tokens) are encrypted using industry-standard encryption (AES-256 at rest and TLS in transit).

These credentials are never logged, never shared with third parties, and are accessible only to system-level processes required to enable user-authorized functionality within the platform.

All actions involving brokerage connectivity are initiated based on user-enabled settings and can be modified, disabled, or revoked at any time through your account settings.

JEDI AI does not have access to withdraw funds or transfer assets from your brokerage account.

3. How We Use Your Information

We use your information to: provide and maintain the Service, send system-generated notifications and updates, process subscription payments, improve platform performance, and communicate important updates about your account or the Service.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Amazon Web Services (AWS) — Cloud infrastructure, database hosting, email delivery (SES), SMS (SNS), authentication (Cognito)
• Stripe — Payment processing and subscription billing
• Brokerage Platforms (e.g., Alpaca, Charles Schwab, Tradier) — Brokerage connectivity and user-authorized transaction infrastructure

These providers process data only as necessary to deliver their respective services.

5. Data Sharing

We do not sell your personal data. We share information only with the third-party services listed above, and only as necessary to operate the platform. We may disclose information if required by law or to protect our legal rights.

JEDI AI does not hold or manage user funds. All assets remain with the user’s connected brokerage account.

6. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. Analytics data is collected in aggregate and does not identify individual users.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. You may also request a copy of your data or request that we restrict or limit certain processing activities, where applicable. You may unsubscribe from marketing emails using the link in any email. You may revoke brokerage API access from your account settings. Users may disconnect their brokerage account or disable platform features at any time through account settings.

9. Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest (AES-256), secure authentication via AWS Cognito with optional two-factor authentication, and regular security reviews of our infrastructure.

Platform functionality related to brokerage connectivity depends on third-party systems and APIs, and may be subject to delays or interruptions outside of JEDI AI’s control.

10. International Users

If you are accessing the Service from outside the United States, you consent to the transfer and processing of your information in the United States.

11. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect personal information from children. If we become aware that a child has provided personal data, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.