Privacy policy

The controller of your personal data is Jakub Gruszczyk QBKSHOP (NIP 6423222018).

For privacy-related requests, contact us at privacy@alphainvestor.app.

This policy supplements notices shown on this website (for example, cookie consent prompts).

This policy covers personal information processed through (a) public marketing pages on this website and (b) early-access or waitlist forms.

We do not provide brokerage, custody, or order-routing services. We are not your investment adviser or fiduciary.

When you browse our website, we and our hosting providers may process technical data such as IP address, approximate location derived from IP, browser type, device identifiers, pages viewed, referring URLs, and timestamps. We use this information to operate, secure, and improve the site, and to measure basic performance.

If you enable optional analytics (for example, privacy-preserving web analytics provided by our hosting vendor), we may collect aggregated usage statistics. Depending on configuration, analytics may rely on cookies or similar technologies.

If you join an early-access waitlist, we collect the information you submit (typically email address, and optionally your name), along with your preferred language where you provide it. We may also process bot-mitigation signals when you complete a challenge (for example, Cloudflare Turnstile).

Waitlist data is used to manage access, send product updates you have requested or consented to, and improve onboarding. Messages may be delivered through our email delivery provider (for example, Resend), including optional welcome emails when enabled.

You can unsubscribe from marketing emails using the link in those emails, where applicable. Transactional or service-related messages may still be sent where necessary to operate the service.

At this time, this policy applies only to the website and waitlist flows described above.

We do not use your personal data submitted through the website or waitlist to train publicly available foundation models.

Where GDPR or similar laws apply, we rely on one or more of the following legal bases: performance of a contract (providing the service you request), consent (for example, marketing emails or optional analytics, where required), legitimate interests (for example, securing our services, preventing abuse, improving reliability, and understanding aggregate product usage), and legal obligations.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.

Our website may use cookies, local storage, or similar technologies that are strictly necessary for security and core functionality, and (where enabled) analytics technologies as described above.

Browser or device settings may let you refuse some cookies; refusing strictly necessary cookies can affect site functionality.

We share personal information with service providers who process data on our instructions ("processors"), including hosting and analytics (Vercel), email delivery and waitlist management (Resend), bot mitigation (Cloudflare Turnstile), and database infrastructure for anti-abuse/rate limiting (Neon/Postgres). We may also disclose information if required by law, to respond to lawful requests, or to protect rights, safety, and security.

We do not sell your personal information for money. Where required by applicable U.S. state privacy laws, we honor applicable rights regarding targeted advertising, sale, or sharing as those terms are defined by law.

We may process and store information in the European Economic Area and in other countries where we or our providers operate. If we transfer personal data from the EEA, UK, or Switzerland to countries not deemed adequate by the relevant regulator, we use appropriate safeguards such as Standard Contractual Clauses (and UK Addendum where applicable), supplemented by technical and organizational measures where required.

We retain personal information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Waitlist records are generally retained until you unsubscribe or request deletion, or until they are no longer needed for access management, subject to a reasonable cooling-off period for backups and logs.

Technical logs may be retained for shorter periods in line with security and troubleshooting needs, unless a longer period is required by law.

We implement technical and organizational measures designed to protect personal information, including access controls, encryption in transit where appropriate for the architecture, and vendor due diligence. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Depending on your location, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability. You may also have the right to lodge a complaint with a supervisory authority.

To exercise rights, contact us at privacy@alphainvestor.app. We may need to verify your request. If you are in the EEA/UK, you may also contact your local data protection authority.

Alpha Investor is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it.

Our website and waitlist do not make automated decisions that produce legal or similarly significant effects about you within the meaning of Article 22 GDPR.

We may update this policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Where changes are material and required by law, we will provide additional notice (for example, on-site message or email).