> ## Documentation Index
> Fetch the complete documentation index at: https://support.rallies.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# How We Handle Your Data

> A user-friendly guide to understanding how Rallies.ai collects, stores, protects, and uses your personal and financial data.

# How We Handle Your Data

We know you're trusting us with important information—including investment data. This page explains how we handle your data in plain language.

For complete legal details, see our [Privacy Policy](/legal/privacy-policy).

***

## Our Data Philosophy

1. **Collect only what we need** — No data hoarding "just in case"
2. **Protect everything we have** — Your security is a priority
3. **Be transparent** — You should understand what happens with your information

***

## What Data We Collect

### Data You Give Us

| Data Type             | Why We Need It                   |
| --------------------- | -------------------------------- |
| **Email address**     | Account login, communications    |
| **Password**          | Secure access (stored encrypted) |
| **Name** (optional)   | Personalization                  |
| **Watchlists**        | Save and display your watchlists |
| **Portfolio entries** | Show holdings and performance    |
| **AI conversations**  | Provide research assistance      |
| **Support messages**  | Help you when needed             |

### Data We Collect Automatically

| Data Type          | Why We Need It             |
| ------------------ | -------------------------- |
| **Device type**    | Optimize experience        |
| **Browser info**   | Ensure compatibility       |
| **IP address**     | Security, fraud prevention |
| **Usage patterns** | Improve the product        |
| **Error logs**     | Fix bugs                   |

### Data from Connected Services

**Brokerage via Secure Connection:** \[REVIEW REQUIRED: Confirm data fields]

* Holdings/positions — Display portfolio
* Cost basis — Calculate gains/losses
* Transaction history — Track performance

**Important:** We NEVER receive or store your brokerage password.

***

## What We DON'T Collect

* Social Security numbers
* Full credit card numbers (Stripe handles payments)
* Brokerage login credentials
* Bank account numbers
* Tax identification numbers
* Government IDs

***

## How We Protect Your Data

### Encryption

* **In Transit:** TLS/HTTPS encryption (same as banks)
* **At Rest:** AES-256 encryption in databases

### Access Controls

* Only authorized employees access user data
* Access limited to job necessity
* All access logged and audited

### Infrastructure Security \[REVIEW REQUIRED: List certifications]

* Secure cloud infrastructure
* Regular security audits
* Automated threat detection
* DDoS protection

### Password Security

* Never stored in plain text
* Hashed using bcrypt
* Two-factor authentication supported

***

## How We Use Your Data

* **Provide Service:** Display portfolios/watchlists, power AI, send alerts, process payments
* **Improve Service:** Analyze usage (anonymized), fix bugs, develop features
* **Communicate:** Updates, support, marketing (opt-in only), security alerts

### AI Training \[REVIEW REQUIRED: Legal review]

We may use anonymized conversation data to improve AI. Before training:

* PII is removed
* Data is aggregated
* Safeguards prevent memorization

Opt out by emailing [privacy@rallies.ai](mailto:privacy@rallies.ai).

***

## Who Can Access Your Data

### Our Team

* Customer support (to help you)
* Engineering (to fix issues)
* Security (to protect against threats)

### Service Providers \[REVIEW REQUIRED: List all processors]

| Partner                  | Purpose        | Access           |
| ------------------------ | -------------- | ---------------- |
| **Stripe**               | Payments       | Billing info     |
| **Brokerage aggregator** | Brokerage      | Auth tokens only |
| **Cloud hosting**        | Infrastructure | Encrypted data   |
| **Email service**        | Notifications  | Email addresses  |

All partners contractually required to protect your data.

### We Never Sell Your Data

We do not sell, rent, or trade your personal information.

***

## Brokerage Connection Security

### How Brokerage Connection Works

1. You enter credentials directly with our secure connection service (not us)
2. The service verifies identity with your brokerage
3. It provides us a secure token
4. We fetch read-only portfolio information

**We never see your brokerage password.**

### What We CAN'T Do

* Make trades in your account
* Transfer money
* Change brokerage settings
* Access your password

### Disconnecting

Disconnect your brokerage anytime in Portfolio settings. \[REVIEW REQUIRED: Add link]

***

## Payment Data Security

### How Stripe Works

* Card details go directly to Stripe
* We only see last 4 digits
* Stripe is PCI DSS Level 1 certified

### What We Store

* Billing name/address (for invoices)
* Card type and last 4 digits (for display)
* Transaction history

### What We Don't Store

* Full card numbers
* CVV/security codes
* Bank account numbers

***

## Your Data Rights

* **See Your Data:** View in settings or [download a copy](/account/download-data)
* **Correct Your Data:** Update anytime in account settings
* **Delete Your Data:** [Delete your account](/account/delete-account) anytime
* **Control Communications:** Manage in [notification settings](/account/notifications)

***

## Data Retention \[REVIEW REQUIRED: Verify periods]

| Data Type        | Retention After Deletion       |
| ---------------- | ------------------------------ |
| Personal data    | 30 days                        |
| Backups          | 90 days                        |
| Anonymized usage | Indefinite (not linked to you) |
| Payment records  | As required by law             |

***

## International Users

Rallies is US-based. Data from outside the US is transferred to and processed in the US. \[REVIEW REQUIRED: Add EU provisions if applicable]

***

## Children's Privacy

Rallies is for adults only (18+). Contact us if you believe a child created an account.

***

## Questions?

**Email:** [privacy@rallies.ai](mailto:privacy@rallies.ai)

Response time: Within 30 days.

***

## Quick Reference

| Question                           | Answer                                       |
| ---------------------------------- | -------------------------------------------- |
| Do you sell my data?               | No, never                                    |
| Can you see my brokerage password? | No                                           |
| Is my data encrypted?              | Yes, in transit and at rest                  |
| Can I delete my data?              | Yes, anytime                                 |
| Can I download my data?            | Yes, through settings                        |
| Who accesses my data?              | Only authorized team and necessary providers |

***

## Related Articles

* [Privacy Policy](/legal/privacy-policy)
* [Privacy Summary](/legal/privacy-summary)
* [Terms of Service](/legal/terms-of-service)
* [Portfolio Security](/portfolio/security)
* [Delete Your Account](/account/delete-account)