Privacy Policy
Last reviewed: 2026-08-06. This policy applies to AI Alpha Engine and describes how personal data is processed when you use this service.
Operator and contact
AI Alpha Engine is a commercial subscription service. It is operated by the company below, which is the controller of the personal data described in this policy. Enquiries about your personal data, including access, correction, and deletion requests, can be sent to the contact address shown.
- Registered nameLighthouse Cat AB
- Company registration number556574-7671
- Registered officeJärfälla, Sweden
- Contact[email protected]
Data we process
Depending on how you use the service, we may process the following data:
- Login identity — email address and/or Discord user ID and display name, used to authenticate you and identify your account.
- Uploaded portfolio data — holdings, quantities, market values, currencies, and purchase history imported from Avanza CSV files or Montrose snapshots.
- Generated reports and diagnostics — AI-generated analysis, thesis validation results, and portfolio diagnostics produced from your portfolio data and market signals.
- Technical and security logs — server access logs, error logs, and session records retained for operational security purposes.
- Subscription and payment data — your Stripe customer and subscription identifiers, the plan you are on, the subscription status, the current billing period and renewal or cancellation date, and the amount and currency charged. Card numbers and bank details are handled by Stripe and are never received or stored by this service.
- How you found us — if you arrived through a tagged campaign link, the campaign source and medium from that link — recorded once when the account is created, never updated afterwards, and deleted with the account. It says which link brought you here and nothing about what you did before or afterwards.
Purposes and legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Authentication and account access | Contract — necessary to provide the service (Art. 6.1.b) |
| Portfolio import and storage | Contract — you explicitly upload this data to use the analysis features (Art. 6.1.b) |
| Report generation and diagnostics | Contract — core service delivery (Art. 6.1.b) |
| Security and operational logs | Legitimate interest — protecting the service and its users from misuse (Art. 6.1.f) |
| Subscription and payment administration | Contract — managing your subscription, renewals and cancellations (Art. 6.1.b) |
| Accounting and legal compliance | Legal obligation — keeping accounting records and meeting other statutory duties (Art. 6.1.c) |
| Sending login codes by email | Contract — delivering the code that signs you in (Art. 6.1.b) |
| Connecting a Montrose account | Contract — fetching your holdings from Montrose on your instruction (Art. 6.1.b) |
| Customer support | Contract — answering questions about your account and the service (Art. 6.1.b) |
| Handling requests about your personal data | Legal obligation — responding to access, correction, deletion and other requests under the GDPR (Art. 6.1.c) |
| Understanding how visitors find the service | Legitimate interest — measuring which campaigns and pages lead to sign-ups, using counts that identify no one (Art. 6.1.f) |
| Preventing and investigating abuse | Legitimate interest — protecting the service, its users and Lighthouse Cat AB from misuse, fraud and unauthorised access (Art. 6.1.f) |
AI processing
Portfolio and market data is sent to OpenAI's API (see Service providers and integrations below) to generate analysis reports and diagnostics. What is sent is the portfolio's identifier, its holdings and market data; your email address, Discord identity and payment data are not sent. Under OpenAI's API terms, data submitted through the API is not used to train OpenAI's models. OpenAI may retain it for a limited period in order to monitor for misuse and then deletes it — zero data retention is not enabled for this service, so that retention does apply.
Automated processing and decision-making
The service uses automated scoring and AI to generate investment analysis. This processing does not make decisions that produce legal effects concerning you or that similarly significantly affect you. AI Alpha Engine executes no trades and does not change your holdings; every decision about your money remains yours.
Retention
- Account and portfolio data is retained while your account is active.
- Ending a trial or cancelling a subscription changes what your account can access. It does not delete the account or the portfolio data you have uploaded, which is kept until you ask us to delete it.
- You may request deletion of your account and associated personal data (see Your rights below). Some data may need to be retained for as long as is required to comply with legal obligations, to establish or defend legal claims, or to prevent misuse.
- Subscription and payment records are retained for as long as accounting law requires — in Sweden, seven years after the end of the financial year they relate to. This applies even after you ask for your account to be deleted, and covers the Stripe identifiers, amounts and dates listed under Data we process.
- Security and operational logs are retained for a limited period (typically up to 90 days) and then deleted.
How we protect your data
We use appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, loss and disclosure. Access to account and portfolio data is limited to the people and systems that need it in order to provide, operate or protect the service.
Your rights
Under the GDPR you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate data.
- Deletion — request deletion of your account and associated personal data.
- Restriction — request that we restrict processing of your data in certain circumstances.
- Objection — object to processing based on legitimate interest.
- Portability — receive your data in a structured, machine-readable format where technically feasible.
- Complaint — lodge a complaint with the Swedish Authority for Privacy Protection (IMY, Integritetsskyddsmyndigheten) at imy.se.
To exercise any of these rights, contact: [email protected]
Service providers and integrations
These are the third parties that process data for AI Alpha Engine as it is deployed today. This is the actual list, not a set of examples:
- Infrastructure — the service runs on Lighthouse Cat AB's own server in Sweden, and the database holding your account and portfolio data is on that same machine. No third-party hosting or cloud provider stores it.
- Cloudflare — proxies traffic to the site and terminates TLS, and therefore processes your IP address and request metadata.
- OpenAI — receives your portfolio holdings together with market data in order to generate your analysis reports.
- Anthropic — used only for market-wide research that contains no portfolio, account or other personal data.
- Resend — delivers login codes by email, and therefore processes your email address.
- Stripe — processes subscription payments, including your billing details and payment identifiers.
- Discord — if you log in with Discord, Discord processes your Discord identity according to its own privacy policy.
- Financial Modeling Prep, EODHD and Yahoo Finance — market data providers. They receive ticker symbols only; no personal data is included in these requests.
- Montrose — if you connect a Montrose account, your holdings are fetched from it on your instruction.
International transfers
Your account and portfolio data is stored on Lighthouse Cat AB's own server in Sweden. Personal data leaves the European Economic Area only through the providers that receive it and are established or process data outside the EEA: Cloudflare, OpenAI, Stripe, Resend and Discord. Where personal data is transferred outside the EEA, Lighthouse Cat AB ensures that the transfer is covered by a valid transfer mechanism — for example an adequacy decision or the European Commission's Standard Contractual Clauses — together with supplementary safeguards where these are required. Anthropic and the market data providers listed above are not included here because they receive no personal data. Contact us if you need the details for a specific provider.
Cookies
This service uses only necessary cookies for login session management. No advertising, analytics, or cross-site tracking cookies are used. The full list is in the Cookie Policy.
Age requirement
AI Alpha Engine is intended only for adults. You must be at least 18 years old to create an account, start a trial or purchase a subscription, and the service is not directed at children. We do not knowingly collect personal data from anyone under 18; if we become aware that we have, we delete it. The same requirement is stated in the Terms of Service.
Changes to this policy
This policy may be updated to reflect changes to the service or applicable law. The date at the top of this page indicates when it was last reviewed. Where a change materially affects how your personal data is processed, we will tell you through the service or by email before it takes effect, where that is required or otherwise reasonable.