Privacy Policy
Last Updated: February 20, 2026
1. Introduction
AutoStock AI ("we", "us", "our", or "App") is committed to protecting your privacy. This Privacy Policy explains how our application collects, uses, and safeguards your information in compliance with Google Play's User Data policy, the California Consumer Privacy Act (CCPA), and the General Data Protection Regulation (GDPR).
2. Information We Collect
2.1 Information You Provide
- API Credentials: Your Alpaca API Key, Alpaca Secret Key, Public.com API credentials, and DeepSeek API Key. These are stored LOCALLY on your device using Android's EncryptedSharedPreferences (AES-256 encryption) and are NEVER transmitted to our servers.
- Trading Preferences: Your selected stock symbols, cryptocurrency pairs, strategy settings, and risk parameters are stored locally on your device.
2.2 Information Collected Automatically
- Device Information: We do NOT collect unique device identifiers (IMEI, MAC address) except as required by Google AdMob for advertising purposes (Advertising ID).
- Usage Data: We do NOT track how you use the App or collect analytics data.
- Crash Logs: Android may collect anonymous crash reports if you have opted in to usage statistics on your device.
2.3 Information We Do NOT Collect
- We do NOT collect your name, email, phone number, or address.
- We do NOT collect your bank account, credit card, or social security information.
- We do NOT collect your precise location data.
- We do NOT access your contacts, photos, microphone, camera, or other device files.
3. How We Use Your Information
Your locally-stored API credentials are used solely to:
- Connect to Alpaca Markets to execute stock trades and retrieve market data.
- Connect to Public.com to execute stock and cryptocurrency trades.
- Connect to DeepSeek AI to perform stock and crypto analysis.
- Connect to Yahoo Finance and Stooq for supplementary historical market data.
All processing occurs directly between your device and these third-party APIs. We act only as a user interface.
4. Third-Party Services
The App communicates with:
4.1 Alpaca Markets
- Purpose: Stock trade execution and real-time market data retrieval.
- Data Shared: Your API credentials (encrypted), trade orders.
- Their Privacy Policy: https://alpaca.markets/disclosures
4.2 Public.com
- Purpose: Stock and cryptocurrency trade execution, portfolio management.
- Data Shared: Your API credentials (encrypted), trade orders, account information.
- Their Privacy Policy: https://public.com/privacy-policy
4.3 DeepSeek AI
- Purpose: AI-powered stock and crypto analysis with DeepThink reasoning.
- Data Shared: Anonymous market data (prices, volumes, indicators). NO personal data is shared.
4.4 Yahoo Finance
- Purpose: Historical stock price data and market information.
- Data Shared: Stock ticker symbols only. NO personal data is shared.
4.5 Stooq
- Purpose: Historical price data for technical analysis.
- Data Shared: Stock ticker symbols only. NO personal data is shared.
4.6 Google AdMob
- Purpose: Display advertisements.
- Data Collected: Advertising ID, device type, approximate location (for ad targeting).
- You can opt out of personalized ads in your device settings.
- Google Privacy Policy: https://policies.google.com/privacy
5. Data Storage and Retention
- All user data is stored LOCALLY on your device only.
- We do NOT maintain external servers or databases containing your information.
- Trade history and logs are stored in a local SQLite database on your device.
- Data is retained until you uninstall the App or manually clear App data.
- You can delete all your data at any time by going to: Settings > Apps > AutoStock AI > Clear Data.
6. Data Security
We implement security measures including:
- AES-256 encryption for API keys using Android Keystore.
- HTTPS (TLS 1.2+) for all network communications.
- No data transmission to our servers—we don't have access to your credentials.
- Certificate pinning for broker API connections.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Know what personal data we hold (none on our servers).
- Deletion: Delete all locally stored data by uninstalling the App or clearing App data.
- Opt-Out: Disable personalized advertising through your device settings.
- Portability: Export your data (not applicable as all data is already on your device).
For California residents (CCPA): We do not sell your personal information.
For EU residents (GDPR): We process data based on legitimate interest and your consent.
8. Children's Privacy
The App is NOT intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us immediately.
9. Permissions Explained
- INTERNET: Required to connect to trading APIs and display ads.
- FOREGROUND_SERVICE: Required to keep the trading bot running reliably.
- POST_NOTIFICATIONS: Required to notify you of trades and important events.
- RECEIVE_BOOT_COMPLETED: Optional, allows the bot to restart after device reboot if enabled.
10. Changes to This Policy
We may update this Privacy Policy periodically. Continued use of the App after changes constitutes acceptance of the new policy. We encourage you to review this policy regularly.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact:
Email: waggleman09@gmail.com