Last updated: 11 October 2026
1. Who we are
Sigmalyst ("we", "us") is an analytics and education platform for self-directed traders, operated at sigmalyst.com. This policy explains what personal data we collect, why, and the choices you have. For any privacy question or request, use the contact page and we will respond.
2. Data we collect
Account data: your email address and name when you register or accept an invitation. Portfolio data you enter: holdings, tickers, buy prices, scan filters, execution rules, risk settings and webhook configurations you create in the app. Broker connections: when you connect a broker, your OAuth access token is stored encrypted (AES-256) and shown only in masked form. Payment data: payments are processed by Stripe — we never see or store your card details; we retain a record of your subscription status and credit balance. Usage data: aggregate, de-identified product analytics (page views, feature events such as a backtest being run) used to improve the app.
3. How we use your data
We use your data to operate the service: running your scans, evaluating your holdings, executing rules you configure against your connected broker, granting the entitlements you purchase, sending service emails (verification codes, password resets, invites), and providing support. We do not sell your personal data, and we do not use your portfolio or trading data to advertise to you.
4. Third parties we rely on
Stripe processes subscription and one-time payments. Market data providers (such as Finnhub and Yahoo Finance) supply price, fundamentals and earnings data used to compute your signals. Your email provider handles authentication emails. If you connect a webhook channel (Discord, Slack, Telegram), alert content you configure is sent to that service. These providers process data under their own privacy policies.
5. Cookies and local storage
We use browser local storage to keep you signed in, remember your onboarding progress, disclaimer acknowledgment and display preferences. We use essential cookies only — we do not run third-party advertising or cross-site tracking cookies.
6. Data sharing and visibility
Your holdings, filters, rules and credit ledger are private to your account. If you publish a strategy to the marketplace, its name, description, criteria and your chosen display name become publicly visible, and buyers can leave ratings on it. Shared backtest links are accessible to anyone who has the link.
7. Data retention and deletion
We keep your data while your account is active. You can ask us to delete your account and personal data at any time via the contact page; we will remove it within 30 days, except where we must retain records for legal, accounting or fraud-prevention purposes (for example payment records retained as required by tax law).
8. Security
Data is transmitted over HTTPS and access to your records is restricted to your account. Broker tokens are encrypted at rest. No system is perfectly secure: please use a strong, unique password, and remember that trading involves substantial risk regardless of how well data is protected.
9. Your rights
Depending on where you live (for example under the UK GDPR or EU GDPR), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us and we will respond within the statutory timeframe.
10. Changes to this policy
If we make material changes to this policy we will update the date below and, where appropriate, notify you in the app or by email. Continued use of the app after a change means you accept the updated policy.