Privacy Policy

1. Introduction

BlueSeal Group Inc, which owns and operates MovingProfit (“we,” “us,” or “MovingProfit”), builds an AI-powered platform for tracking markets, analyzing your portfolio, and running autonomous trading agents through a broker you connect. We're a software company, not a broker-dealer — we never hold your money or securities.

This policy explains, in plain terms, what data we collect, why we collect it, and the choices you have. If you use MovingProfit, this is the agreement we operate under.

2. Information We Collect

2.1 Information you give us

• Account information — name, email, password, and any investor-verification documents we're required to keep on file. Why: to create your account, sign you in, and meet KYC obligations.
• Brokerage credentials — OAuth tokens or API keys for the brokerage(s) you connect (today, Alpaca Markets). Why: so we can read your positions and submit orders on your behalf. We never see your broker password.
• Trading preferences — watchlists, agent configurations, strategy parameters, risk limits, goals. Why: to actually run the features you set up.
• AI queries — the questions you ask our analysis tools, the symbols you research, and the conversation history. For example, asking "why is NVDA down today?" while your watchlist contains NVDA and AMD means both your question and that context get processed. Why: so we can return a useful answer.
• Support messages — anything you send to us directly. Why: to reply and improve the product.

2.2 Information we collect automatically

• Usage data — pages visited, features used, search queries, click patterns. Why: to debug, prioritize improvements, and detect abuse.
• Device information — browser, OS, IP address, device identifiers. Why: security (spotting suspicious sign-ins) and basic compatibility.
• Session data — login timestamps, session length, authentication tokens. Why: to keep you signed in safely.

2.3 Information we receive from third parties

• From your broker — balances, buying power, positions, order history, fills, performance metrics. Why: these are the inputs that drive your dashboard, P&L, and agents.
• From market data providers — real-time and historical prices (1-minute resolution back to 2012), earnings, fundamentals, technicals, company profiles — sourced from Polygon.io, Financial Modeling Prep, and similar providers. Why: these power charts, screeners, and agent decisions.
• From identity-verification providers — if regulations require it, verification status and related compliance data. Why: legal compliance.

3. How We Use Your Information

We group what we do with your data into four buckets:

3.1 To run the Service

• Display your portfolio, positions, P&L, and performance metrics.
• Execute orders through your connected broker, including trades initiated by autonomous agents you've enabled.
• Send you trade fills, agent alerts, and service notifications.
• Personalize the interface to your preferences and goals.

3.2 To power AI features

• Forward your queries and the relevant portfolio context (e.g. the tickers on your watchlist) to AI providers — Anthropic, OpenAI, or xAI — to generate the analysis you asked for.
• Run autonomous trading agents that read market data, evaluate your configured strategy, and decide whether to place orders.
• Generate backtests, monitor agent performance, and surface insights.
• Improve our proprietary algorithms using aggregated, anonymized signals — never your individually identifiable trading record.

3.3 To keep things safe and legal

• Detect and prevent fraud, account takeover, market manipulation, and abuse.
• Meet legal, regulatory, and broker-required obligations — including responses to subpoenas, court orders, and lawful agency requests.
• Enforce our Terms of Service.

3.4 To improve the platform

• Analyze usage patterns and system performance to find what's working and what isn't.
• Diagnose bugs and prioritize fixes.

4. Data Storage and Security

In practice this means: your traffic is encrypted in transit, your session is managed by a hardened authentication system, and your broker credentials sit behind access controls so only the trading service can use them.

Specifically, we use:

• HTTPS/TLS for all data in transit.
• SuperTokens for session management.
• Database access controls, connection pooling, and audit logging.
• Continuous security monitoring and prompt patching of dependencies.

No system is ever 100% secure. If a breach affects your data, we'll notify you as required by law and tell you what we know and what to do.

5. Data Sharing and Disclosure

We do not sell your personal information or your trading data. Period.

We share data only in these specific cases:

• Your broker — we send trade instructions (yours and your agents') and pull back your account data. Credentials move over OAuth or encrypted API keys.
• AI providers (Anthropic, OpenAI, xAI) — your queries and the portfolio context needed to answer them. These providers operate under contracts that block them from using your data to train their public models.
• Market data providers (Polygon.io, Financial Modeling Prep) — this is one-way. We pull data from them; we don't send your personal information or trading activity to them.
• Cloud infrastructure — your data lives on managed infrastructure (TimescaleDB, MinIO/Cloudflare R2, Redis) under strong encryption and access controls.
• Legal requirements — in response to subpoenas, court orders, lawful government requests, or where required for market-surveillance and fraud investigations.
• Protection of rights — where necessary to protect MovingProfit, our users, or the public, or to investigate fraud or market manipulation.
• Business transfers — if we're acquired or merge, your information transfers with the business. We'll notify you before that happens.

6. Data Retention

We keep data for as long as your account is active or as needed to provide the Service:

• Account data — until you delete your account.
• Trading history — for the life of your account, so we can show you long-run performance.
• Market data — kept indefinitely for charts, backtests, and research. This isn't personal to you.
• AI query history — kept so you can review past conversations. Deletable on request.
• Session data — expires automatically based on authentication settings.

After account deletion, we may retain some records where law or legitimate business reasons require it (for example, regulatory bookkeeping).

7. Your Rights and Choices

Depending on where you live, you may have the following rights:

• Access — ask for a copy of the personal information we hold about you.
• Correction — ask us to fix anything inaccurate or incomplete.
• Deletion — ask us to delete your personal information.
• Portability — ask for your data in a portable format.
• Opt-out of sale — not applicable. We don't sell personal information, so there's nothing to opt out of.

Some of these you can do yourself, right now:

• Disconnect your broker — go to the account page and click Disconnect Account. We'll stop reading from and writing to your broker immediately. You can also revoke access from inside your broker's own dashboard.
• Pause or delete a trading agent — manage agents from the agents page; pausing stops new orders.

How to exercise the rest: submit a request from your account settings. We'll verify it's really you, then respond within the timeframe your jurisdiction requires.

8. Cookies and Tracking

We use cookies and local storage for the essentials — signing you in, remembering your preferences, and keeping the app working between page loads.

We do not use third-party advertising cookies or tracking pixels. We do not sell data to advertisers. There is no advertising on MovingProfit.

9. Children's Privacy

MovingProfit is not for anyone under 18. We don't knowingly collect data from minors. If we learn we have, we'll delete it promptly.

10. California Privacy Rights (CCPA)

If you live in California, the CCPA gives you specific rights on top of those in section 7:

• The right to know what personal information we've collected about you, where it came from, and what we did with it.
• The right to request deletion of personal information we hold about you.
• The right to opt out of the sale of personal information. We don't sell it, so this right is moot here — but you have it.
• The right not to be discriminated against for exercising any of these rights.

To exercise these, submit a request from your account settings. Some financial data may be exempt from CCPA under the Gramm-Leach-Bliley Act; where that applies, we'll explain.

11. International Users

MovingProfit operates from the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S., where data-protection laws may differ from yours. By using the Service from abroad, you understand and accept this.

12. Changes to This Policy

We'll update this policy from time to time. If a change is material, we'll post the updated version with a new effective date and, where appropriate, give you a heads-up in the app or by email. Continuing to use MovingProfit after a change is posted means you accept the updated version.

13. Contact Us

Questions, requests, or concerns about this policy:

BlueSeal Group Inc
Incorporated in Delaware, United States