Privacy · Interim · Last updated September 28, 2026
What we store
A plain-language summary, not a formal privacy policy.
This site is under construction
Automate Fundamentals is not a live business yet. It is a personal project by its two founders, it does not charge anyone, and it is changing often. We will update the site and this page over time, and replace it with a full privacy policy reviewed by a lawyer before we become a business. Until then, this page tells you plainly what we keep, so we are as transparent as we can be.
What we store when you use the site
- Your account: your email address, a salted hash of your password (never the password itself), your username, and your settings, such as light or dark mode.
- Sign-in history: the time of each sign-in attempt, whether it worked, how you signed in (password, authenticator code, or recovery code), your IP address, and your browser's name and version. We use it to spot attempts to break into your account.
- Email confirmation: whether you confirmed your email address, and, for 90 minutes after we send a confirmation link, a one-way hash of that link (never the link itself). We send email through Amazon SES, which receives your email address and the message.
- Two-step sign-in: the shared key your authenticator app uses, and your recovery codes stored as one-way hashes. We never see the codes your app shows.
- Your Alpaca API key, if you connect one: the key and secret are stored encrypted, and are used only to load your account and to place the orders you ask for. You can remove the key at any time.
- What you create: analyses and price targets, strategies and their runs, and pies and their deployments. Anything you mark public is shown to other members with your username.
- Sign-in cookies: a cookie that keeps you signed in, and a security cookie that protects forms. We do not use advertising or tracking cookies.
- In your browser only: if you are signed out, your light or dark choice is saved in your browser's local storage, not on our servers.
What we do not do
- We do not sell or share your data, and we do not show ads.
- We do not see your Alpaca password or bank details. Alpaca holds your money and your brokerage account.
- We do not use analytics or tracking scripts.
Other services the site uses
- Microsoft Azure hosts the site and its database.
- Alpaca provides your brokerage data and handles your orders.
- Finnhub provides earnings calendar data. It receives no information about you.
- Google Fonts serves the site's font, and jsDelivr serves the chart and search scripts on some signed-in pages, so your browser contacts them when those pages load.
Deleting your data
Closing your account deletes the account and everything you created. Account closing will be added to Settings; until then, contact us and we will delete it for you.