Thesis Trading AI.

Legal

Privacy Policy

Last updated: August 3, 2026

Draft. This document is pending review by counsel and will be finalized before the platform accepts its first subscription. It is published now so applicants can see the substance of what they'd be agreeing to.

1. Scope

This policy covers the Thesis Trading AI platform and this website. The service is offered to United States residents only; this policy is written to US law, including the California Consumer Privacy Act as amended (CCPA/CPRA) and comparable state privacy laws.

2. What we collect

Identity and account

Name and email from sign-in (email, Google, or Apple through Microsoft Entra External ID), organization membership, roles, and settings. We receive only basic profile claims from Google or Apple — never your password with those providers.

Inquiry and trading profile

What you tell us in the founding inquiry and your in-app profile: investing background, strategies, trading style, symbols you trade, brokerages, tools, goals, and banded (never exact) figures for account size and trading frequency.

Brokerage connection

If you connect a brokerage, we store the OAuth tokens the broker issues, encrypted at rest, plus the positions, transactions, and balances the broker returns. We never collect your brokerage username, password, or two-factor codes.

Content and activity

Theses, journal entries, community posts, direct messages, drafts, and how you use the platform (pages, features, timestamps, device and IP information used for security and rate limiting).Direct messages are private from other members but are scanned by automated moderation systems — scam and abuse detection per the Community Guidelines — and may be reviewed when a recipient reports them. No human reads DMs otherwise.

Billing

Payments run through Stripe. We keep subscription state and invoice history; card numbers live with Stripe, not us.

3. How we use it

  • To operate the platform: run simulations, grade outcomes, deliver community features, and personalize agent analysis to how you trade.
  • To review founding inquiries (every inquiry is read by a person).
  • To bill, prevent fraud and abuse, enforce the Community Guidelines (including automated moderation), and secure accounts.
  • To build the aggregated research product described below.
  • To protect paid content: content delivered to your account may carry visible notices and invisible forensic watermarks derived from your account identifier, so leaked copies can be traced to the account that leaked them.
  • To contact you about your account. Marketing email, if any, is opt-out.

4. The research data product — disclosed plainly

We build and license aggregated, anonymized research datasets derived from platform activity (for example: thesis flow by symbol and strategy, aggregate positioning sentiment, outcome distributions). The safeguards:

  • No names, emails, account identifiers, or free-text content are ever included.
  • Aggregates enforce minimum-population thresholds (k-anonymity with suppression), so no cell can be traced to an individual.
  • Data from Enterprise and Platform tier organizations is excluded entirely.
  • Every dataset export is logged and auditable.

Some state laws define broad terms like "sale" or "sharing" of personal information; because these datasets are aggregated and de-identified, we do not believe they constitute personal information, but you can register an objection at any time via Hello@ThesisTrading.AI.

5. Who we share with

Service providers under contract, only as needed to run the platform: Microsoft Azure (hosting, identity), MongoDB Atlas (database), Stripe (payments and creator payouts), market data providers, and email delivery. We do not sell personal information to data brokers. We disclose information if required by law or to protect the platform and its users.

6. Retention

Account data is kept while your account is active. Trading history and journal entries are event-sourced and retained for the life of the account because the product's value is the longitudinal record. On verified deletion request we delete or de-identify personal information within the statutory window, except records we must keep (billing, audit, legal hold). Brokerage tokens are deleted immediately on disconnection.

7. Security

Encryption in transit and at rest; brokerage tokens additionally encrypted at the application layer; secrets in Azure Key Vault; role-based access controls; audit logging. No system is perfectly secure — we will notify you of breaches as required by law.

8. Your rights

Depending on your state, you may have the right to access, correct, delete, or export your personal information, and to opt out of certain processing. Exercise any of these at Hello@ThesisTrading.AI; we verify requests against your account sign-in. We do not discriminate for exercising rights.

9. Children

The platform is for adults 18 and over. We do not knowingly collect data from minors.

10. Changes and contact

Material changes will be announced in-app and by email before they take effect. Privacy questions:Hello@ThesisTrading.AI.