Effective date: August 20, 2026
This Privacy Policy explains what information ALPHA collects, how it is used, who we share it with, and your rights regarding that information. We try to keep this plain-English. If anything is unclear, email us.
When you create an account and use ALPHA, we collect:
We do not collect your real name, mailing address, or anything beyond what you explicitly enter or connect.
Your data is used to operate ALPHA for you. Specifically:
We do not sell your data, target ads at you, or use your financial entries for behavioral analytics.
We do not sell or rent your data. We share it in two situations only: with the service providers necessary to operate ALPHA, as listed in Section 7 — Service Providers, and with a person you have told us to send something to. Each provider receives only the data they need for their specific function, and is bound by their own privacy obligations.
There are two places where you direct us to send something to someone else. When you send an invoice or an invoice reminder, we email it to the client address you entered, and that email carries your name, the invoice and what it is for. When you record paying a collaborator their share of a song, we email that collaborator to tell them, using the address you saved for them. Both go out because you asked for them, to the address you supplied, and nowhere else.
We may also disclose information if required by law (e.g., a valid subpoena), or to protect against fraud or abuse.
People who are not ALPHA users. If you enter a client or a collaborator, we hold what you typed about them — usually a name, an email address, and the invoice or payment record you attached them to. That came from you, not from them, and they may never have heard of us. We use it only to send the messages described above and to show you your own records. We do not market to them, sell their details, or add them to any mailing list. Anyone who wants to know what we hold about them, or would rather not be emailed again, can write to support@alphaos.studio.
When someone asks us to stop, we keep their email address on a do-not-send list. That means holding on to the one thing they asked us not to use — there is no other way to recognize the address and leave it alone. It is used for that and nothing else.
Your data is stored on a secured server (Railway, US region). Passwords are hashed using industry-standard algorithms and are never stored in plain text. Bank access tokens are encrypted at rest. Two-factor authentication is available for your account.
We take reasonable steps to protect your information, though no system is completely immune to risk.
You have the right to:
ALPHA does not use advertising cookies or behavioral analytics. Your browser stores your authentication token to keep you logged in.
Our error monitoring service (Sentry) tags errors with your user ID and email so we can connect a bug report to your account. It does not perform page-view tracking or behavioral analytics.
We use the following third-party services to run ALPHA. Each receives only the data it needs to do its job.
If we add or change a service provider, we will update this section.
ALPHA is not intended for users under the age of 13. We do not knowingly collect information from children.
We may update this Privacy Policy as the service evolves. We will update the effective date at the top of this page when changes are made.
For any privacy-related questions or to request deletion of your data, contact us at support@alphaos.studio.