Privacy Policy

Last updated: April 11, 2026

1. Introduction

This Privacy Policy explains how ROGA AI LIMITED ("AlphaScala", "we", "our", or "us") collects, uses, stores, and protects information when you use alphascala.com (the "Service"). We are registered in Gibraltar at Unit G02, Eurocity, Europort Avenue, Gibraltar, GX11 1AA.

By using the Service, you consent to the data practices described in this Policy. If you do not agree, please do not use the Service.

2. Information We Collect

Information You Provide

  • Account information: name, email address, password (hashed)
  • Newsletter subscriptions: email address
  • Broker matcher inputs: trading experience, preferences, country, capital range
  • Watchlists, alerts, and saved articles: content you create and store
  • Communications: any messages you send to us

Information Collected Automatically

  • Usage data: pages visited, features used, time spent on the Service
  • Device information: browser type, operating system, screen resolution
  • IP address and approximate location
  • Referrer URL and search terms

Cookies and Tracking

We use cookies and similar technologies for authentication, preferences, analytics, and to improve the Service. You can disable cookies in your browser settings, but some features may not work properly.

3. How We Use Your Information

We use collected information to:

  • Provide, operate, and maintain the Service
  • Authenticate users and secure accounts
  • Personalize content and features (e.g. dashboard layouts, watchlists)
  • Send transactional emails (account, security, password reset)
  • Send the AlphaScala newsletter (with your consent — you can unsubscribe at any time)
  • Generate AI-powered broker recommendations based on your inputs
  • Analyze usage patterns and improve the Service
  • Detect, prevent, and address technical issues, fraud, and abuse
  • Comply with legal obligations

4. Legal Basis for Processing (GDPR)

Where applicable under GDPR, we process your personal data on the following legal bases:

  • Contract: to provide the Service you requested
  • Consent: for marketing emails and optional features
  • Legitimate interests: for analytics, fraud prevention, and improving the Service
  • Legal obligation: to comply with applicable laws

5. Sharing Your Information

We do not sell your personal data. We share information only in these limited cases:

  • Service providers: We use trusted third parties to operate the Service, including:
    • Supabase (database and authentication)
    • Vercel (hosting and analytics)
    • OpenRouter (AI inference for chat and content generation)
    • Email delivery providers
    • Market data providers (TwelveData, news APIs)
  • Affiliate partners: When you click broker affiliate links, we may share anonymous referral data (no personal information) for tracking purposes.
  • Legal compliance: When required by law, court order, or to protect our rights.
  • Business transfers: In connection with a merger, acquisition, or sale of assets.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within a reasonable timeframe, except where retention is required by law or for legitimate business purposes (e.g. fraud prevention, dispute resolution).

7. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS), secure password hashing, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: request a copy of your personal data
  • Rectification: correct inaccurate information
  • Erasure: request deletion of your data
  • Restriction: limit how we process your data
  • Portability: receive your data in a machine-readable format
  • Objection: object to certain processing activities
  • Withdraw consent: for activities based on consent
  • Lodge a complaint with a data protection authority

To exercise these rights, contact us using the details below.

9. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including jurisdictions where data protection laws may differ. We take appropriate safeguards to ensure your data remains protected.

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it.

11. Third-Party Links

Our Service contains links to third-party websites (such as TipRanks, brokers, and data providers). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated via email or a prominent notice on the Service.

13. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at:

ROGA AI LIMITED
Unit G02, Eurocity
Europort Avenue
Gibraltar, GX11 1AA
Gibraltar