Privacy Policy

Last Updated: May 26, 2026

1. INTRODUCTION

AutoStockAI ("we", "us", or "our"), developed by Nicholas Insalata, is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and share your personal information when you visit our website (the "Site") or use our mobile application (the "App").

2. WEBSITE (THE SITE)

We do not collect any personal data from visitors to our landing page. No cookies or tracking scripts are used on the Site for marketing purposes.

3. MOBILE APPLICATION (THE APP)

The App is designed with a "Privacy First" architecture. We do NOT store your trading API keys on our servers. All sensitive credentials (Alpaca, Public, Kraken, DeepSeek) are stored LOCALLY on your device in encrypted storage. All trading activity occurs directly between your device and the respective broker APIs.

4. INFORMATION WE COLLECT

4.1 Information You Provide

  • API Credentials: Your Alpaca API Key, Alpaca Secret Key, Public.com API Key, Kraken API Key, and DeepSeek API Key. These are stored LOCALLY on your device using Android's EncryptedSharedPreferences (AES-256 encryption) and are NEVER transmitted to our servers.
  • Trading Preferences: Your selected stock symbols, strategy settings, risk parameters, and chat settings are stored locally on your device.

4.2 Information Collected Automatically

  • Device Information: We do NOT collect unique device identifiers (IMEI, MAC address) except as required by Google AdMob for advertising purposes (Advertising ID).
  • Usage Data: We do NOT track how you use the App or collect analytics data.
  • Crash Logs: Android may collect anonymous crash reports if you have opted in to usage statistics on your device.

4.3 Information We Do NOT Collect

  • We do NOT collect your name, email, phone number, or address.
  • We do NOT collect your bank account, credit card, or social security information.
  • We do NOT collect your precise location data.
  • We do NOT access your contacts, photos, microphone, camera, or other device files.

5. HOW WE USE YOUR INFORMATION

Your locally-stored API credentials are used solely to:

  • Connect to Alpaca Markets to execute stock trades and retrieve market data.
  • Connect to Public.com to execute stock trades.
  • Connect to Kraken to execute cryptocurrency trades.
  • Connect to Interactive Brokers (IBKR) for advanced trading integration.
  • Connect to DeepSeek AI to perform stock analysis.
  • Connect to Yahoo Finance and Stooq for supplementary historical market data.

All processing occurs directly between your device and these third-party APIs. We act only as a user interface.

6. THIRD-PARTY SERVICES

The App communicates with several third-party providers. Your data is only shared to facilitate trade execution and market analysis:

7. GOOGLE ADMOB

Both the Site and the App use Google AdMob services to display advertisements. Google may collect:

  • Advertising ID
  • Device type and approximate location (at the city level)
  • Publisher ID: pub-4558292798069021

For more information, visit Google's Privacy Policy.

8. GOOGLE PLAY BILLING

The App offers premium subscription plans via Google Play Billing:

  • Payment Processing: All subscription payments are processed securely by Google Play. We do NOT store or have access to your payment information.
  • Free Trial: New subscribers may be eligible for a 14-day free trial. Your subscription will automatically begin at the end of the trial period unless cancelled.
  • Billing Data: Google Play manages your subscription status, billing history, and renewal dates. We only receive confirmation of your active subscription status from Google Play.

9. DATA STORAGE AND RETENTION

  • All user data is stored LOCALLY on your device only.
  • We do NOT maintain external servers or databases containing your information.
  • Trade history and logs are stored in a local SQLite database on your device.
  • Data is retained until you uninstall the App or manually clear App data.
  • You can delete all your data at any time by going to: Settings > Apps > AutoStock AI > Clear Data.

10. DATA SECURITY

We implement security measures including:

  • AES-256 encryption for API keys using Android Keystore.
  • HTTPS (TLS 1.2+) for all network communications.
  • No data transmission to our servers—we don't have access to your credentials.
  • Certificate pinning for broker API connections.

11. YOUR RIGHTS

Depending on your jurisdiction, you may have the right to:

  • Access: Know what personal data we hold (none on our servers).
  • Deletion: Delete all locally stored data by uninstalling the App or clearing App data.
  • Opt-Out: Disable personalized advertising through your device settings.

11.1 Regional Provisions

  • US (California - CCPA): We do not sell your personal information.
  • EU (GDPR): We process data based on legitimate interest and your consent.
  • UK (UK GDPR / Data Protection Act 2018): We comply with the UK Data Protection Act. You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have mishandled your data.

12. CHILDREN'S PRIVACY

The App is NOT intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us immediately.

13. PERMISSIONS EXPLAINED

  • INTERNET: Required to connect to trading APIs and display ads.
  • FOREGROUND_SERVICE: Required to keep the trading bot running reliably.
  • WAKE_LOCK: Required to prevent the device from sleeping during active trading.
  • POST_NOTIFICATIONS: Required to notify you of trades and important events.
  • RECEIVE_BOOT_COMPLETED: Optional, allows the bot to restart after device reboot if enabled.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Continued use of the App after changes constitutes acceptance of the new policy. We encourage you to review this policy regularly.

15. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy, please contact:

Email: founder@autostockai.com