Privacy Policy

This Privacy Policy explains how MoneySignals (“MoneySignals,” “we,” “us,” or “our”) collects, uses, and shares information when you use our website (moneysignals.us), our API (api.moneysignals.us), our email reports, and related services (the “Service”). By using the Service, you agree to this Policy. It should be read together with our Terms of Service.

1.Information We Collect

Information you provide:

• Email address — when you subscribe to our email reports or create an account.
• Name — optionally, if you provide it when subscribing or contacting us.
• Payment information — if you purchase a paid plan, payment is processed by our payment processor, Stripe. Stripe collects and processes your card or payment details; we do not receive or store your full card number. We receive limited billing details such as your subscription status, plan, the email associated with the payment, and the last four digits / card brand from Stripe.
• Communications — the contents of emails or messages you send us (for example, support or enterprise inquiries).

Information collected automatically:

• API usage data — when you use the API, we log your API key identifier, the endpoints and methods you call, response status and timing, your IP address, and your user agent, for security, rate-limiting, billing, and diagnostics.
• Website analytics — we use Google Analytics, which sets cookies and collects standard analytics data (pages viewed, approximate location, device and browser type, referring pages) to help us understand and improve usage. See Section 3.
• Server logs — standard web-server logs (IP address, timestamp, requested URL) generated when you access the Service.

2.How We Use Information

Connected portfolios: When you import a snapshot or use an available broker connection, we store the account label, broker and environment, dated balances and holdings, and watchlist you provide on our servers to display and consolidate your information. Delegated access tokens and explicitly configured personal broker credentials are encrypted on our servers and used for supported read operations. A provider's upstream permissions may be broader than MoneySignals' permitted operations. The workspace does not place orders. Import previews expire after 20 minutes and can no longer be used. Maintenance removes expired temporary records, so physical removal may occur later than the expiry time.

Your private portfolio is not included in our public API or global-evidence MCP tools. The workspace lets you explicitly download portfolio context or authorize a separate private agent token with chosen permissions and an expiration. Private agent tokens are stored hashed and may be revoked in the workspace. Depending on permissions, your agent can read saved portfolios, explicitly linked AutoTrader records and research, and request supported broker-data refreshes. Information received by another service is governed by its own policies.

Private broker news stores a bounded sample of headline metadata, source links, clocks and symbols. Full article text, summaries and images are not retained. Portfolio and watchlist relevance is computed within MoneySignals; those holdings and watchlists are not sent to the news provider. Private news is not redistributed through the public API or public MCP.

• provide, operate, and maintain the Service, including delivering email reports and API responses;
• process payments, manage subscriptions, and send service and billing notices;
• authenticate API keys, enforce rate limits and quotas, and prevent abuse, fraud, and security threats;
• respond to your inquiries and provide support;
• analyze and improve the Service, our models, and our content;
• comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use the contents of your account to target you with third-party advertising.

3.Cookies & Analytics

The account portal keeps a bearer session in this browser's local storage to maintain your sign-in. The workspace also stores display preferences and, when signed out, a device-local watchlist. The workspace does not load third-party analytics scripts; other website pages may use the analytics described below.

We use cookies and similar technologies, primarily through Google Analytics, to measure traffic and usage. You can control cookies through your browser settings and can opt out of Google Analytics using Google's opt-out browser add-on. Disabling cookies may affect some non-essential features. We do not currently respond to browser “Do Not Track” signals.

4.How We Share Information

We share information only as described below. We do not sell personal information.

Recipient	Purpose
Stripe	Payment processing and subscription management.
Google Analytics	Website usage analytics.
Email & messaging providers	Delivering our email reports and notifications to you.
Cloud hosting & infrastructure (e.g., Google Cloud, Cloudflare)	Hosting, content delivery, and security for the Service.
Connected brokers and broker-data providers	Processing your authorized sign-in, account-data and supported private headline requests.
Agent services you authorize	Receiving the workspace information you permit them to read, under the scopes you select.
Legal / safety	When required by law, subpoena, or legal process, or to protect the rights, safety, or property of MoneySignals, our users, or others.
Business transfers	In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

These providers process information on our behalf or as independent controllers under their own privacy policies.

5.Data Retention

Disconnecting a broker removes its locally stored access credential and private news cache, and keeps your last dated snapshot. Removing an account deletes its active stored portfolio records. Erasing workspace data removes active stored portfolio accounts, holdings, watchlists, temporary imports, connection credentials and private news caches. It also revokes private agent access and the link to AutoTrader records without deleting AutoTrader's underlying trading history, and requires you to sign in again. These actions do not delete your brokerage account or automatically revoke the MoneySignals app permission at the broker; revoke that permission separately in the broker's settings. Infrastructure backups may retain earlier copies until the applicable backup retention period ends.

Private headline caches expire three days after collection. Expired items are excluded from reads; maintenance removes retained metadata. Revoking an agent token stops future access but cannot remove information that an external agent has already received.

We retain personal information for as long as needed to provide the Service and for legitimate business or legal purposes. For example, we keep your email while you are subscribed and for a reasonable period afterward; API usage logs are retained for security, billing, and diagnostics for a limited period and then deleted or aggregated. Billing records may be retained longer to meet tax and accounting obligations. You may request deletion as described in Section 7.

6.Data Security

We use reasonable technical and organizational measures to protect information, including encrypted connections (HTTPS) and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your API key confidential.

7.Your Rights & Choices

• Unsubscribe. You can opt out of marketing and report emails at any time via the unsubscribe link in any email, or by contacting us.
• Access, correction, deletion. You may request a copy of, correction of, or deletion of your personal information by emailing [email protected].
• EU/UK (GDPR). If you are in the European Economic Area or the United Kingdom, you have rights to access, rectify, erase, restrict, and port your data, and to object to certain processing. Our legal bases include performance of a contract, your consent, and our legitimate interests. You may also lodge a complaint with your supervisory authority.
• California (CCPA/CPRA). If you are a California resident, you have the right to know, delete, and correct your personal information and to opt out of its sale or sharing (we do not sell or share personal information as those terms are defined). We will not discriminate against you for exercising these rights.

We will respond to verifiable requests within the time required by applicable law.

8.International Data Transfers

We are based in the United States and process information there. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in the United States and other countries, which may have different data-protection laws than your own.

9.Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.

10.Third-Party Links

The Service may link to third-party websites and services we do not control. This Policy does not apply to them; please review their privacy policies.

11.Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12.Contact

Questions or requests regarding your privacy? Contact us at [email protected].