Privacy Policy

Last updated: August 4, 2026

1. What we collect

Account data — your email address and authentication data, managed through Amazon Cognito. We never see or store your password.
Billing data — payments are processed by Stripe. We do not receive or store your card number; we receive your subscription status and the email associated with the payment.
Usage data — pages visited, features used, and questions asked to the Gamma AI assistant, associated with your account, used to operate and improve the Service and to enforce plan limits.
Technical data — IP address, browser type, and access logs collected by our infrastructure (AWS CloudFront) for security and reliability.

2. What we do NOT collect

We do not collect brokerage credentials, positions, or account balances. We do not sell, rent, or share your personal information with advertisers or data brokers. There is no third-party advertising on the Service.

3. How we use your information

To provide and secure the Service, authenticate you, and route you to the features your plan includes.
To process subscriptions and send transactional email (verification codes, receipts, service notices).
To send product updates or a newsletter — only where you have opted in, and every email includes an unsubscribe link.
To understand aggregate feature usage so we can improve the product.

4. AI features

Questions you send to the Gamma AI assistant, along with relevant market context, are processed by our AI provider (Anthropic) to generate responses. Do not include sensitive personal information in AI conversations.

5. Service providers

We rely on a small set of processors to run the Service: Amazon Web Services (hosting, authentication, email), Stripe (payments), Anthropic (AI responses), and our market-data providers. Each receives only the data needed to perform its function.

6. Data retention and deletion

Account data is retained while your account is active. You may request deletion of your account and associated personal data at any time by emailing support@dfd.io; we will delete it within 30 days except where retention is required for legal, tax, or fraud-prevention purposes.

7. Security

Traffic is encrypted in transit (TLS). Authentication is handled by Amazon Cognito; access to production systems is restricted and audited. No system is perfectly secure — please use a strong, unique password.

8. Cookies

We use strictly necessary cookies to keep you signed in (authentication tokens). We do not use advertising or cross-site tracking cookies.

9. Children

The Service is not directed to anyone under 18, and we do not knowingly collect data from minors.

10. Changes and contact

We may update this policy; material changes will be announced on the Service or by email. Questions or requests: support@dfd.io