Privacy Policy

Last Updated: December 1, 2025

Livermore AI ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using the Platform:

• Account Information: Name, email address, password (encrypted)
• Profile Data: Optional profile information you choose to provide
• Trading Strategies: Strategy configurations, parameters, and backtest results
• Communication Data: Messages sent through support channels or chat features
• Payment Information: Processed securely through Stripe (we do not store credit card numbers)

1.2 Automatically Collected Information

When you access the Platform, we automatically collect:

• Usage Data: Pages visited, features used, time spent, click patterns
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, error logs
• Cookies: Session cookies, preference cookies (see Cookie Policy below)

1.3 Third-Party Integration Data

When you connect third-party services:

• Alpaca Markets: OAuth access token, account number, account status, trading activity (we do NOT store your Alpaca username or password)
• Market Data Providers: API requests and responses for backtesting

2. How We Use Your Information

We use collected information for the following purposes:

2.1 Provide and Improve Services

• Create and manage your account
• Execute backtests and deploy trading strategies
• Connect to Alpaca Markets for trading
• Analyze platform usage to improve features
• Develop new features and functionality

2.2 Communication

• Send service-related notifications (deployment status, errors)
• Respond to support requests
• Send important updates about the Platform
• Marketing communications (with your consent, opt-out available)

2.3 Security and Compliance

• Detect and prevent fraud or abuse
• Monitor for security threats
• Comply with legal obligations
• Enforce our Terms of Use

2.4 Analytics and Research

• Understand how users interact with the Platform
• Analyze trading strategy performance (aggregated, anonymized)
• Improve AI models and backtesting algorithms

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who assist us in operating the Platform:

• Vercel: Hosting and deployment
• Neon: Database hosting
• Stripe: Payment processing (subscription billing)
• OpenAI: AI-powered chat interface
• Railway: Backend microservices

3.2 Alpaca Markets

When you connect your Alpaca account, we share:

• OAuth authorization requests
• Trading orders generated by your strategies
• Account information requests

3.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal process (subpoenas, court orders)
• Law enforcement requests
• Protection of our rights or safety
• Investigation of fraud or security issues

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Security

We implement industry-standard security measures to protect your information:

4.1 Technical Safeguards

• Encryption: HTTPS/TLS for all data in transit
• Authentication: Secure password hashing (bcrypt)
• OAuth: Secure token-based access to third-party services
• Database Security: Encrypted connections to PostgreSQL
• Access Controls: Role-based permissions and authentication

4.2 Organizational Safeguards

• Limited employee access to personal data
• Regular security audits and updates
• Incident response procedures

Note: No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: Personal data deleted within 30 days of account deletion
• Backups: May persist in backups for up to 90 days
• Legal Requirements: Some data may be retained longer for compliance (e.g., tax records, transaction logs)

6. Your Rights and Choices

6.1 Access and Portability

You have the right to:

• Access your personal information
• Request a copy of your data (data export)
• Receive your data in a structured, machine-readable format

6.2 Correction and Deletion

You can:

• Update your account information in Settings
• Request correction of inaccurate data
• Delete your account (this will erase most personal data)

6.3 Consent Withdrawal

• Opt out of marketing emails (unsubscribe link in emails)
• Disconnect Alpaca integration at any time
• Disable cookies through browser settings

6.4 Do Not Track

We do not currently respond to Do Not Track (DNT) browser signals. You can control tracking through cookie settings.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

7.1 Essential Cookies

• Session Cookies: Keep you logged in
• Security Cookies: Prevent fraud and abuse
• Preference Cookies: Remember your settings (theme, language)

7.2 Analytics Cookies

• Understand how users navigate the Platform
• Identify popular features and usage patterns
• Measure performance and errors

You can control cookies through your browser settings. Note that disabling essential cookies may impact Platform functionality.

8. Third-Party Links

The Platform may contain links to third-party websites (e.g., Alpaca Markets, GitHub). We are not responsible for the privacy practices of these sites. Please review their privacy policies.

9. Children's Privacy

Livermore AI is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Platform, you consent to such transfers.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request details about personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on the Platform
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Your continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy, or wish to exercise your privacy rights, please contact us:

• Website: https://livermoreai.com
• GitHub: GitHub Repository