Legal

Privacy Policy

Last updated: October 2026 · rotationalert.com

Rotation Alert (“we,” “us,” “our”) operates rotationalert.com. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information. By using our service, you agree to the practices described here.

This service is intended for use by residents of the United States. We do not specifically target users outside the US. If you are accessing this service from outside the United States, please be aware that your data may be processed in the United States.

1. Information We Collect

We collect only what is necessary to provide the service:

Account information

Your name and email address when you create an account. Your password is hashed using bcrypt — we never store plain text passwords and cannot read your password.

Payment information

We do not collect or store your credit card details. All payment processing is handled by Stripe, Inc. We receive only a subscription status and customer ID from Stripe. See Stripe's Privacy Policy.

Usage data

We store your subscription status, email notification history, and when you last received a nurture email. We do not build behavioral profiles or track your browsing activity across other websites.

Session data

We use session cookies to keep you logged in. These are functional cookies required for the service to operate. We do not use advertising or tracking cookies.

2. How We Use Your Information

  • —To create and manage your account
  • —To send you email alerts when a major sector rotation is detected (subscribers only)
  • —To send occasional market update emails to registered users who have not unsubscribed
  • —To process your subscription payments via Stripe
  • —To respond to your support requests
  • —To maintain the security and integrity of the service

We do not sell your personal information. We do not share your data with advertisers. We do not use your data to train AI models. See Section 3 for what that last point does and doesn't cover.

3. How We Use AI

Rotation Alert's sector classification is primarily rule-based: tickers are matched using a fixed internal dictionary and pattern matching, with no AI involved in most cases. Where that's not enough — to classify a ticker the dictionary doesn't cover, or to judge how significant a detected change is for the intraday signal — the Service uses Anthropic's Claude to assist. Separately, some subscriber-facing content, such as our monthly product update summary, is drafted with AI assistance and reviewed by a human before it's sent.

We do not use subscriber personal data to train any AI model. The inputs to these AI calls are market data (tickers, company names, price, and sector information) and our own internal product notes — never your account information, email address, or usage data.

4. Where Your Data Lives

We use the following third-party services to operate Rotation Alert. All are US-based:

ServicePurposeData storedRegion
NeonDatabaseAccount data, subscription statusAWS us-east-1 (Virginia)
VercelHosting & infrastructureServer logs (temporary)AWS us-east-1
StripePayment processingPayment & billing dataUS
ResendEmail deliveryEmail address, send historyUS

We also rely on the following services to identify rotations and generate signal content. None of them receive subscriber personal data:

ServicePurposeData storedRegion
FinvizScreener, fundamentals & news data for classificationNone — outbound market-data pull onlyUS
Yahoo FinanceHistorical price data for return calculationsNone — outbound market-data pull onlyUS
AlpacaPaper (simulated) trade execution on our own test accountsNone — no subscriber accounts or fundsUS
AnthropicAI classification fallback and AI-assisted drafting of some subscriber contentTicker/company names, internal product notes — not personal dataUS

5. Email Communications

By creating an account, you agree to receive occasional market update emails. These are sent no more than once every few months to non-subscribers and are sent to active subscribers only when a major sector rotation is detected.

You may unsubscribe at any time using the link in any email we send, or by contacting us at [email protected]. Unsubscribing from emails does not delete your account.

6. Children's Privacy

Rotation Alert is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

7. Your Rights

Depending on your location, you may have the right to:

  • —Access the personal information we hold about you
  • —Request correction of inaccurate data
  • —Delete your account yourself from your dashboard, or request deletion by email
  • —Opt out of marketing emails at any time
  • —Request a copy of your data in a portable format

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To submit a CCPA request, contact us at [email protected].

9. Data Retention and Account Deletion

We retain your account data for as long as your account is active.

You can close your account yourself from your dashboard at any time. We will email you a confirmation link first, and nothing is removed until you follow it. You can also ask us to close it by emailing [email protected]; we will respond within 30 days.

When an account is closed, we immediately cancel any active subscription, stop all alerts, and remove your name, your email address, your password and the IP address recorded at signup. Your sign-in sessions are ended and you will not be able to sign in again. We cannot restore a closed account.

We keep a record of your subscription and payments, including Stripe customer and transaction identifiers, the dates of your subscription, and the date and IP address on which you accepted our Terms of Service. We keep these because we are required to retain financial records for tax and accounting purposes, and because they are the evidence we would rely on to establish or defend a legal claim, including a payment dispute. These records no longer carry your name or email address.

10. Security

We use industry-standard security practices including bcrypt password hashing, encrypted connections (HTTPS), and environment variable protection for all API keys and credentials. No method of transmission over the internet is 100% secure, but we take reasonable precautions to protect your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

12. Contact

Questions about this Privacy Policy or your data? Contact us at [email protected].