Privacy Policy
Last updated: 30 October 2026
The short version.
- We collect what we need to run your account and the tools you use: your email, your scripts and chats, your TradingView username and your plan.
- We do not sell your data. In Europe, detailed product analytics and our X and Google ad tags run only if you accept them in the cookie banner. Outside Europe they run unless you decline them or your browser sends Global Privacy Control.
- Your trade journal stays in your browser. It is only sent anywhere if you ask the Trading Coach about it.
- AI features send your messages to the AI providers named below so they can answer. Do not put sensitive personal data into prompts.
- You can see, export, correct or delete your data at any time by writing to support@getalphacharts.com.
1. Who is responsible for your data
Coastline Digital sp. z o.o., which operates Alpha Charts, is the controller of the personal data described in this policy. Our company details are at the end of this page. For anything about your data, write to support@getalphacharts.com. We have not appointed a data protection officer, because the law does not require one for a business like ours. The same address reaches the people responsible for privacy.
This policy covers the website at getalphacharts.com, the Alpha Charts web application, our emails and the Alpha indicators on TradingView. TradingView, Google, Facebook and the payment provider each have their own privacy policies for data you give directly to them.
2. What we collect and when
2.1 When you visit the website
Like any website, our servers and hosting providers receive technical data with each request: your IP address, browser and device type, the page requested, the referring page and the time. Fonts are loaded from Google Fonts, and some ticker logos and static market data files load from other hosts, which also see your IP address when your browser requests them.
2.2 When you create an account
- Email and password: your email address and a password. The password is stored only as a salted hash by our authentication provider. We cannot read it.
- Google or Facebook sign-in: if you sign in with Google or Facebook, we receive the name, email address and profile picture that the provider shares. We never receive your password for that provider.
- Account records: your plan, free trial dates, subscription status and role, and the date you joined.
2.3 When you use the Service
- Your content: scripts and strategies you write or save, your messages to the Pine Copilot, the Analyst and the Trading Coach and their replies, screener settings and saved preferences.
- Free tester runs: each script you run in the free tester, with the symbol, timeframe and result of the run. We keep them with your Account to see what fails and fix it.
- TradingView access: the TradingView username you link, and the history of our requests to grant or remove access to the Indicators.
- AI usage: how many AI requests and how much processing you used, to apply your plan's allowance.
- Alerts, where available: the conditions you set and where to deliver them, such as an email address or webhook address.
2.4 Your trade journal
If you import trades into the journal, for example from a broker's CSV export, they are stored in your browser's local storage on your device, not on our servers. If you ask the Trading Coach about your journal, a summary of the relevant trades is sent with your message to our AI providers, and that conversation is saved in your Account like other chats.
2.5 When you pay
Card and payment details go directly to our payment provider, Stripe, on its own checkout page. We never receive your full card number. From Stripe we receive a customer reference, your plan, the amounts and dates of payments, the last digits, type and issuing country of your card, your billing country and address and, if you are a business, your company details and VAT number. We also note the country your connection appears to come from when you open the checkout. We keep these countries with the subscription as our record of where you bought from, which the tax rules require; the card's country decides whether a plan can be sold to you (Terms 7.1).
If you buy through Onelink (Terms 7.10), Onelink, Stripe's merchant of record service, is the seller of record. It receives your payment, billing and order details on its checkout as an independent controller under its own privacy notice, and we receive from it the same purchase details as above.
2.6 When you contact us or apply
When you use the Contact page, apply to the affiliate programme or submit an indicator idea, we receive what you enter, such as your name, email address, TradingView username, the topic and your message, and any links you include.
2.7 Analytics
- Without consent: we count page views with GoatCounter, which sets no cookies, does not store IP addresses and does not track you across sites.
- Product analytics and session recordings: PostHog records how the product is used: pages viewed, clicks, recordings of sessions including the charts, and answers to short surveys. Everything typed into fields is masked and not recorded, except the free tester's script box: the script you paste or type there shows in the recording. If you are signed in, these records are linked to your Account. In the EU, the EEA, the UK and Switzerland PostHog loads only if you accept the banner. Outside those countries it also loads before you answer, unless you decline or your browser sends a Global Privacy Control signal; this notice is how we tell you. If you decline, PostHog does not load, and a recording that started before you declined stops. PostHog is reached through our own address (getalphacharts.com/ingest), which passes what your browser sends to PostHog's EU servers unchanged, together with your IP address for the country lookup.
- Advertising on X: the X (Twitter) ads pixel loads if you accept the banner. Outside the EU, the EEA, the UK and Switzerland it also loads before you answer, unless you decline or your browser sends a Global Privacy Control signal. It tells X that a browser visited our pages, so we can measure our ads and show them to people who visited. X receives your IP address, browser details, the pages visited and its own cookie identifiers, and uses them under its own privacy policy.
- Advertising on Google: the Google Ads tag follows the same rules as the X pixel. It tells Google that a browser visited our pages, so we can measure our Google ads, count the sign-ups they bring and show our ads to people who visited. Google receives your IP address, browser details, the pages visited and its own cookie identifiers, and uses them under its own privacy policy. If you decline later in Cookie settings, the tag is told to stop using your visit for ads.
2.8 Where you came from
If you arrive through a link with campaign tags, such as utm_source or an advertising network's click identifier, or from another website, we note those tags, the referring site, the landing page and the time. In the EU, the EEA, the UK and Switzerland they are kept in your browser's local storage only if you accept the cookie banner, otherwise only for that visit; elsewhere they are kept there for up to 90 days. An affiliate's referral code in the link is treated the same way. If you create an account within 7 days of arriving, we save the tags on your Account to learn which campaigns bring members. These tags describe the link, not you.
2.9 Emails
We send emails your account needs, such as sign-in and password emails, receipts and important notices about your plan or these policies. We send marketing emails only if you agreed to them, and every one has an unsubscribe link.
3. Why we use your data and our legal bases
Under the EU and UK General Data Protection Regulation (GDPR), we need a legal basis for each use of your data.
| Purpose | Data | Legal basis |
|---|---|---|
| Create and run your Account, provide the tools, save your content | Account data, your content, usage | Performing our contract with you (Art. 6(1)(b)) |
| Keep the scripts you run in the free tester, to find and fix what fails | Free tester runs | Legitimate interests (Art. 6(1)(f)) |
| Grant and remove TradingView access | TradingView username, plan status | Performing our contract (Art. 6(1)(b)) |
| Answer AI requests | Your messages and the context needed to answer them | Performing our contract (Art. 6(1)(b)) |
| Take payments, issue invoices, keep accounting and tax records | Billing data | Contract (Art. 6(1)(b)) and our legal obligations under tax and accounting law (Art. 6(1)(c)) |
| Reply to messages and complaints | Contact details, message | Contract or our legitimate interest in helping you (Art. 6(1)(b) or (f)) |
| Keep the Service secure, prevent fraud and abuse, enforce our Terms | Technical data, account and usage data | Legitimate interests (Art. 6(1)(f)) |
| Count visits without cookies (GoatCounter) | Aggregated page views | Legitimate interests (Art. 6(1)(f)) |
| Learn which campaigns bring members | Campaign tags on your Account | Legitimate interests (Art. 6(1)(f)) |
| Detailed product analytics, session recordings and surveys (PostHog) | Usage and session data | Your consent (Art. 6(1)(a)) in the EU, the EEA, the UK and Switzerland, which you can withdraw at any time; elsewhere our legitimate interest in understanding how the product is used (Art. 6(1)(f)), which you can object to by declining in Cookie settings |
| Measure our ads on X and show them to past visitors (X pixel) | Pages visited, device and browser data, X cookie identifiers | Your consent (Art. 6(1)(a)) in the EU, the EEA, the UK and Switzerland; elsewhere our legitimate interest in advertising (Art. 6(1)(f)), which you can object to by declining in Cookie settings |
| Measure our ads on Google and show them to past visitors (Google Ads tag) | Pages visited, device and browser data, Google cookie identifiers | Your consent (Art. 6(1)(a)) in the EU, the EEA, the UK and Switzerland; elsewhere our legitimate interest in advertising (Art. 6(1)(f)), which you can object to by declining in Cookie settings |
| Marketing emails | Email address | Your consent (Art. 6(1)(a)) |
| Establish, exercise or defend legal claims | Relevant records | Legitimate interests (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have weighed them against your rights, and you can object as described in section 8.
4. AI features and your data
- When you use the Pine Copilot, the Analyst or the Trading Coach, your message and the context needed to answer it, such as the script you are working on, the chart readings you ask about or a journal summary, are sent through OpenRouter to the model provider that answers it, currently Anthropic's Claude models, which OpenRouter may run on Anthropic's own servers, Amazon Web Services or Google Cloud.
- We do not include your name or email address in what we send.
- The providers process this data to generate the answer, under their terms for business customers.
- Your conversations are saved in your Account so you can return to them. They stay until you delete them or your Account.
- Please do not put sensitive personal data into prompts, such as health information, passwords, account numbers or other people's personal data.
5. Who receives your data
We share personal data only with providers that help us run the Service, under contracts that allow them to use it only on our instructions, and where the law requires it. We do not sell personal data. Apart from the X and Google ad tags described in section 2.7, we do not share it for advertising.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, sign-in emails and storage of your Account and content | EU (Ireland) |
| Lovable and Cloudflare | Hosting and delivering the website and application | Global network, served from data centres near you |
| OpenRouter and Anthropic (Claude models, run by Anthropic, Amazon Web Services or Google Cloud) | AI features | United States |
| Resend | Sending service emails, including notices to us about new accounts and messages you send | United States |
| PostHog | Product analytics and session recordings (see 2.7 for when it runs) | EU |
| X Corp. (X Ads) | Measuring our ads and building ad audiences from the X pixel, as described in section 2.7. For the collection on our site we and X decide together; X decides alone how it uses the data afterwards | United States and global |
| Google Ireland Limited (Google Ads) | Measuring our ads and building ad audiences from the Google Ads tag, as described in section 2.7. For the collection on our site we and Google decide together; Google decides alone how it uses the data afterwards | EU, United States and global |
| GoatCounter | Cookieless visit counts | Receives no personal data it keeps |
| Google sign-in, if you use it, and font delivery | United States and global | |
| Meta | Facebook sign-in, if you use it | United States and global |
| TradingView | Granting access to the Indicators on your TradingView username | United States and global |
| Stripe (Stripe Payments Europe, Limited) | Payments, subscriptions, invoices, tax calculation and fraud prevention | EU (Ireland), with transfers to the United States |
| Onelink (Stripe) | Seller of record for purchases through Onelink (Terms 7.10), as an independent controller | United States and global |
| Accountants and legal advisers | Accounting, tax and legal compliance | Poland and the EU |
We may also disclose data when the law, a court or a public authority requires it, to protect our rights or the safety of others, or to a buyer or successor if our business is sold or reorganised. In a sale, this policy would continue to apply to your data.
6. Transfers outside Europe
Some providers process data outside the European Economic Area and the United Kingdom, mainly in the United States. Where that happens, the transfer is protected by an adequacy decision, such as the EU-US Data Privacy Framework for certified providers, or by the European Commission's standard contractual clauses. You can ask us for a copy of the relevant safeguards at support@getalphacharts.com.
7. How long we keep your data
| Data | How long |
|---|---|
| Account data and your content | While your Account exists. Deleted within 30 days after you ask us to delete your Account. |
| Chats and saved scripts | Until you delete them or your Account |
| Free tester runs | While your Account exists |
| Billing, invoice and tax records | 5 years from the end of the year of the payment, as Polish tax law requires. Records of EU VAT sales are kept for 10 years, as EU VAT rules require. |
| Messages to us and complaints | Up to 3 years after the last message, to handle follow-ups and possible claims |
| Withdrawal statements | As long as the billing records they relate to |
| Server logs | A short period set by our hosting providers, usually days to weeks |
| Product analytics (PostHog) | No longer than 12 months |
| Campaign tags in your browser | Up to 90 days |
| Your consent choice | Until you change it or clear your browser storage |
Copies in backups are removed as the backups rotate. When data is no longer needed, we delete it or make it anonymous.
8. Your rights
Under the GDPR you have the right to:
- access your personal data and get a copy of it;
- have inaccurate data corrected;
- have your data deleted, where we no longer need it or have no other legal basis to keep it;
- restrict how we use your data in certain cases;
- receive data you gave us in a portable format and have it sent to another provider (portability);
- object to processing based on legitimate interests, and to direct marketing at any time; and
- withdraw consent at any time, without affecting processing that took place before. For analytics, use Cookie settings in the site footer.
To use any of these rights, write to support@getalphacharts.com from the email address of your Account. We may ask you to confirm your identity. We reply within one month. In complex cases this can be extended by two more months, and we will tell you if it is.
You can also complain to a data protection authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. You can also complain to the authority in the EU country where you live or work, or, in the United Kingdom, to the Information Commissioner's Office.
9. Deleting your account
To delete your Account and its data, email support@getalphacharts.com from your Account's email address with the subject "Delete my account". We complete deletion within 30 days, except for records we must keep by law, such as invoices. Deleting your Account also removes your TradingView access. If you signed in with Google or Facebook, you can also remove the connection in that provider's security settings. Doing only that does not delete your Alpha Charts Account.
10. Cookies and local storage
We use a small number of cookies and browser storage entries. Those marked "essential" are needed for the site to work and do not need your consent. In Europe, analytics run only if you accept them in the banner shown on your first visit; outside Europe they run unless you decline. You can change your choice at any time from Cookie settings in the site footer.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| sb-…-auth-token | Keeps you signed in | Essential, local storage | Until you sign out |
| ac.consent.v1 | Remembers your cookie choice | Essential, local storage | Until you change it |
| Preference entries, such as iq.* and iqa.* | Theme, layout, local copies of your scripts and chats | Functional, local storage | Until you clear them |
| ac:journal:v1 | Your trade journal, if you use it | Functional, local storage | Until you clear it |
| ac.touch.first.v1, ac.touch.last.v1 | Campaign tags described in section 2.8 | Analytics, local storage; in Europe only with consent | Up to 90 days |
| iq.ref, iq.ref.claimed | An affiliate's referral code from the link you arrived by | Analytics, local storage; in Europe only with consent | Until your account claims it or you clear it |
| PostHog (ph_…) | Product analytics and session recordings | Analytics; in Europe only with consent, elsewhere unless you decline | Up to 12 months |
| X pixel (cookies set by X on its own domains) | Measuring our ads and ad audiences | Advertising; in Europe only with consent | Set by X; see X's cookie policy |
| Google Ads tag (_gcl_au on our domain, and cookies set by Google on its own domains) | Measuring our ads and ad audiences | Advertising; in Europe only with consent | _gcl_au 90 days; Google's own cookies, see Google's policy |
GoatCounter sets no cookies. The only advertising technologies on the site are the X pixel and the Google Ads tag described in section 2.7.
11. Security
Data is encrypted in transit with HTTPS and stored with providers that encrypt it at rest. Access to production data is limited to the people who need it, uses strong authentication, and database rules restrict each member to their own records. No system is perfectly secure. If a breach affects your data and puts you at risk, we will tell you and the authority as the law requires.
12. Children
The Service is for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us data, write to support@getalphacharts.com and we will delete it.
13. Automated decisions
We do not make decisions about you based solely on automated processing that produce legal effects or similarly significant effects. AI features generate answers to your own requests. They do not decide anything about you.
14. Residents of US states
If you live in a US state with a consumer privacy law, such as California, the categories of data we collect and why are described in sections 2 and 3. We do not sell personal information for money. The X pixel and the Google Ads tag described in section 2.7 may count as "sharing" for cross-context behavioural advertising, or as targeted advertising, under some state laws. You can opt out by choosing Decline in Cookie settings in the site footer, and we treat a Global Privacy Control signal from your browser as the same opt-out. You can ask to know, access, correct or delete your personal information by writing to support@getalphacharts.com, and you may use an authorised agent. We will not treat you differently for using these rights.
15. Changes to this policy
We may update this policy when the Service or the law changes. The date at the top shows the current version. We will tell you about material changes by email or in the Service before they take effect. Earlier versions are available on request.
16. Contact
For privacy questions or requests: support@getalphacharts.com. For our other terms, see the Terms of Service.
- Company
- Coastline Digital sp. z o.o.
- Trading as
- Alpha Charts
- Registered office
- ul. Hoża 86 lok. 410, 00-682 Warsaw, Poland
- Registry court
- District Court for the Capital City of Warsaw, XII Commercial Division of the National Court Register
- KRS number
- 0001269306
- Tax number (NIP)
- 7011333619
- Share capital
- PLN 5,000