Legal

Privacy Policy

Last updated: June 2026 · rotationalert.com

Rotation Alert (“we,” “us,” “our”) operates rotationalert.com. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information. By using our service, you agree to the practices described here.

This service is intended for use by residents of the United States. We do not specifically target users outside the US. If you are accessing this service from outside the United States, please be aware that your data may be processed in the United States.

1. Information We Collect

We collect only what is necessary to provide the service:

Account information

Your name and email address when you create an account. Your password is hashed using bcrypt — we never store plain text passwords and cannot read your password.

Payment information

We do not collect or store your credit card details. All payment processing is handled by Stripe, Inc. We receive only a subscription status and customer ID from Stripe. See Stripe's Privacy Policy.

Usage data

We store your subscription status, email notification history, and when you last received a nurture email. We do not build behavioral profiles or track your browsing activity across other websites.

Session data

We use session cookies to keep you logged in. These are functional cookies required for the service to operate. We do not use advertising or tracking cookies.

2. How We Use Your Information

  • To create and manage your account
  • To send you email alerts when a major sector rotation is detected (subscribers only)
  • To send occasional market update emails to registered users who have not unsubscribed
  • To process your subscription payments via Stripe
  • To respond to your support requests
  • To maintain the security and integrity of the service

We do not sell your personal information. We do not share your data with advertisers. We do not use your data to train AI models.

3. Where Your Data Lives

We use the following third-party services to operate Rotation Alert. All are US-based:

ServicePurposeData storedRegion
NeonDatabaseAccount data, subscription statusAWS us-east-1 (Virginia)
VercelHosting & infrastructureServer logs (temporary)AWS us-east-1
StripePayment processingPayment & billing dataUS
ResendEmail deliveryEmail address, send historyUS

4. Email Communications

By creating an account, you agree to receive occasional market update emails. These are sent no more than once every few months to non-subscribers and are sent to active subscribers only when a major sector rotation is detected.

You may unsubscribe at any time using the link in any email we send, or by contacting us at [email protected]. Unsubscribing from emails does not delete your account.

5. Children's Privacy

Rotation Alert is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Opt out of marketing emails at any time
  • Request a copy of your data in a portable format

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

7. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To submit a CCPA request, contact us at [email protected].

8. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal information within 30 days, except where we are required to retain it for legal or financial compliance purposes (such as Stripe transaction records).

9. Security

We use industry-standard security practices including bcrypt password hashing, encrypted connections (HTTPS), and environment variable protection for all API keys and credentials. No method of transmission over the internet is 100% secure, but we take reasonable precautions to protect your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy or your data? Contact us at [email protected].