Privacy Policy

Last updated: March 2026

1. Information We Collect

Alpha collects minimal information necessary to provide our services. This includes your email address (for authentication), device identifiers (for session security), and on-chain wallet addresses you create or import. We do not collect your private keys, seed phrases, or passwords — these are managed entirely by Turnkey and never touch our servers.

2. How We Use Your Information

We use collected information to authenticate your identity, secure your sessions with device binding, provide trading and portfolio services, and send you notifications you have opted into. We do not sell, rent, or share your personal data with third-party advertisers.

3. Data Storage and Security

Account data is stored in encrypted PostgreSQL databases. Sessions are managed via short-lived JWTs (15-minute expiry) with single-use refresh tokens. All communication between the app and our servers is encrypted via TLS 1.3. Wallet keys are stored in FIPS 140-2 Level 3 certified hardware security modules operated by Turnkey.

4. Third-Party Services

Alpha integrates with third-party providers for specific functionality: Turnkey (wallet management and signing), market data providers (Codex, Hyperliquid, Helius), and blockchain RPC providers. Each provider receives only the minimum data necessary to perform their function.

5. Your Rights

You can request deletion of your account and associated data at any time through the app settings or by contacting privacy@tryalpha.xyz. Upon deletion, we remove your account data from our systems. On-chain data (wallet addresses, transaction history) is immutable and cannot be deleted from public blockchains.

6. Contact

For privacy-related inquiries, contact us at privacy@tryalpha.xyz.