Privacy policy

1. Who we are

Tracking Alpha is a monitor for special situations investors, built and run by Jera Value. We decide how the data described here is used. For any privacy question or request, write to support@trackingalpha.app.

2. What we collect on the waitlist

When you join the waitlist we keep:

• your email address;
• your answer to "How many special situations do you hold right now?";
• where you came from, if the link or the browser says so: the campaign labels in the link (utm_source, utm_medium and utm_campaign) and the host and path of the page that linked here, without its query string;
• when you joined.

Your IP address is used for a minute to limit repeated attempts and is not stored with your entry. Joining twice with the same email keeps one entry.

3. What we collect when you have an account

Accounts open at launch. For members we will keep:

• account details: email address, display name and profile picture if you add them, timezone, and sign-in records;
• what you choose to enter: the deals you follow or hold, and for a position its ticker, number of shares and average cost; your broker's cutoff dates; your scenarios, including the outcomes, dates and probabilities you enter and your inputs for the most you would pay; your notes, and what would change your mind on a deal you hold; and which changes you have marked as reviewed, or whose effect on your scenario you chose to keep or update;
• your preferences, such as which emails you want;
• billing records: your plan, subscription status, invoices, refunds and cancellations, from Stripe;
• feedback and support messages you send us.

We don't ask for broker logins and don't connect to your brokerage account. Please don't put sensitive personal information in notes, what would change your mind, or feedback. A profile picture is stored at a public web address so it can be shown in the app, so anyone with that address can see it.

4. Analytics

We use PostHog and Vercel Web Analytics to understand how the site is used: which pages are visited and which buttons are clicked. Joining the waitlist records an event with your answer and the campaign labels, never your email. For members, a few account events, such as starting checkout or a subscription change, are recorded against an account ID.

PostHog records page addresses without their query string, doesn't look up your location from your IP address, doesn't record your screen or every click, and respects your browser's Do Not Track setting. It stores a random identifier in your browser's local storage, and its analytics data is stored in the EU, on PostHog's EU cloud. Vercel Web Analytics counts visits without cookies. Browser analytics is on by default, and you can turn both off for this browser at any time:

5. Why we use your data, and on what basis

• To run the waitlist and email you when Tracking Alpha opens, with your launch price. We rely on your consent, given when you join. You can withdraw it at any time by asking us to remove you.
• To provide the service you sign up for: your deals, emails about them, billing and support. This is needed to perform our contract with you.
• To keep payment and tax records, because the law requires it.
• To keep the service secure and working, prevent abuse, fix errors, and understand in aggregate how the site is used and which channels bring visitors. These are our legitimate interests, and you can object to them.

We don't make decisions about you that are solely automated and have legal or similarly significant effects.

6. Who helps us run it

We share personal data only with the providers we need, and only what they need:

• Vercel hosts the site and keeps request logs, which include IP addresses;
• Supabase stores the waitlist, accounts and your data, and handles sign-in;
• Stripe handles checkout, subscriptions, payments and tax;
• Resend and Supabase deliver our emails;
• PostHog and Vercel Web Analytics provide the analytics in section 4;
• Telegram carries alerts to the person who runs the service: new waitlist signups, with a masked email (its first letter and domain), your answer to the question and where you came from; feedback you send; and error reports, which can include your account ID, email address, the page you were on and technical details of the error.

To follow deals, the service reads public filings and searches the web. That work is about public companies and doesn't use your personal data.

We may also disclose data when the law requires it, to protect users or the service, or as part of a sale or reorganization of the business under confidentiality. We don't sell personal data or share it for advertising.

7. Payments

Payments are made through Stripe's checkout. Your card details go to Stripe and we never see or store them. When checkout names Stripe or Link as the merchant of record, it handles the payment, taxes, receipts, disputes and the refunds it processes under its own privacy policy.

8. How long we keep it

• Waitlist entries: until launch, then up to 12 months after it so we can tell you about the launch price, unless you become a member or ask us to remove you sooner.
• Accounts and what you entered: for as long as you have an account. When you delete it, we remove it from our live database.
• Payment, tax and legal records: for as long as the law requires, even after an account is deleted.
• Backups and logs: deleted data can remain in backups and provider logs until they expire on those providers' schedules.
• Analytics: kept by PostHog and Vercel under their retention settings, linked to a random identifier rather than your name or email.

9. Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, or to receive it in a portable format. You can object to processing based on our legitimate interests and withdraw consent at any time, which doesn't affect what we did before. Write to support@trackingalpha.app from the email address you joined or signed up with, so we know the request is yours. We answer within one month.

To leave the waitlist, write to the same address. If you think we have handled your data wrongly, you can complain to the data protection authority where you live or work.

10. Cookies and browser storage

We use only what the site needs: sign-in cookies set by Supabase when you have an account, a cookie that remembers whether the app's sidebar is open, and your analytics choice in local storage. Analytics uses local storage as described in section 4. We don't use advertising cookies.

11. International transfers

Some of our providers process data in the United States and other countries. Where European data protection law applies, these transfers rely on an adequacy decision or the European Commission's standard contractual clauses. Write to us for details of the safeguard that applies.

12. Security

Database rules limit each account to its own data, the people who run the service open it only to operate and support it, and our providers' credentials stay on our servers. No online service is completely secure. If you think your account or data is at risk, tell us at support@trackingalpha.app.

13. Children

Tracking Alpha is for adults and is not meant for anyone under 18. If you think a child has given us personal data, write to us and we will delete it.

14. Changes to this policy

We'll update the date on this page and, if a change is significant, we'll tell you.