Privacy Policy

Last updated: June 10, 2026

Congress Trade Alerts ("we", "us", "the Service"), operated at congresstradealerts.com, respects your privacy. This page explains what we collect, why, and how to control it. Plain English, no dark patterns.

What we collect

• Email address — when you join the launch waitlist or (when paid tiers launch) subscribe to a paid plan or sign in with an access key. Waitlist emails are stored in our database (Cloudflare D1, US region) and used solely to notify you about app launches and pricing options.
• Payment information — handled entirely by Stripe. We never see or store your card number.
• Push notification token — if you install the mobile app and enable notifications. This is a device-scoped identifier issued by Apple or Google, not personally identifiable on its own.
• Subscription preferences — if you tap "Subscribe to alerts" on a member or ticker in the mobile app, we store the politician name or ticker symbol alongside your push token so the dispatcher can route only matching alerts to your device. No identity beyond the anonymous token is attached.
• Optional alert channels — if you enable Telegram or Discord delivery, we store the chat ID or webhook URL you provide.
• Watchlist and alert rules — the politicians, tickers, and filter rules you create.
• Paper portfolio — if you use the mobile paper-trading feature, we store your hypothetical positions to compute returns.
• First-party analytics — first-party server-side counting only, no third-party trackers, no fingerprinting. We record a handful of funnel events (signup, trade view, push enable, paid conversion, pricing view) from our own server. Before storing anything we truncate the originating IP to /24 (IPv4) or /48 (IPv6), then hash that truncated IP together with the User-Agent into one of 100 anonymous cohort buckets. The raw IP is never stored. The full User-Agent is never stored. No cookies, no client-side analytics SDK on the website or in the mobile app. Events are retained for 90 days.
• Operational logs — API request rates, error events, and pipeline run metadata for reliability. These logs do not include the contents of your alert rules or payment data.

What we do not collect

• We do not use third-party analytics, ad networks, or behavioral tracking.
• We do not fingerprint your device or browser.
• We do not set tracking cookies. The website uses localStorage only to remember your preferences (e.g., Top Earners mode) in your own browser.
• We do not sell or rent your data. Period.

Mobile app

The Congress Trade Alerts mobile app (iOS and Android) is a companion to the website. This section describes data practices specific to the app.

• Push notification token — if you enable push notifications, the app requests an Expo Push Token (a device-scoped routing identifier, not a hardware ID). This token is stored on your device in encrypted storage (Keychain on iOS, EncryptedSharedPreferences on Android) and transmitted to our server to deliver alerts. You can revoke it at any time via Settings in the app, which deletes it from both your device and our server.
• Subscription preferences — if you subscribe to specific politicians or tickers, those preferences are stored alongside your push token to filter which alerts reach your device. They are deleted when you disable push notifications.
• Watchlist — stored locally on your device only. Never transmitted to our server.
• No analytics SDK — the mobile app contains no third-party analytics, crash-reporting, or telemetry SDK. No usage data is collected from the app.
• No advertising identifiers — the app does not access or transmit IDFA (iOS) or GAID (Android).
• No location, contacts, camera, or photos — the app does not request or access these permissions.

Sub-processors

To run the Service we share data with the following providers:

• Cloudflare — hosting, database (D1), KV cache, and CDN.
• Stripe — payment processing and subscription management.
• Resend — transactional email delivery (welcome emails, alerts). Waitlist emails are not currently shared with any third-party marketing service. Future communications will use Resend with a clear unsubscribe link in every message.
• Telegram and Discord — only if you opt in to those channels and only for the messages you have asked us to deliver.
• Expo Push — Expo's push delivery service routes our notifications to APNs (iOS) and FCM (Android). The push token shown on your device is issued by Expo. See Expo's privacy policy.
• Apple Push Notification Service and Google Firebase Cloud Messaging — only if you install the mobile app and grant push permission.
• Finnhub — market price data lookups (no personal data shared).

How we use it

• To send the alerts you have subscribed to.
• To authenticate you when you sign in with an access key (when paid tiers launch).
• To process subscription payments and send billing notices via Stripe (when paid tiers launch).
• To debug, monitor uptime, and prevent abuse.
• To compute anonymous usage statistics (which features are used, never who uses them).

How long we keep it

We retain your account data for as long as your subscription is active, plus 30 days after cancellation in case you want to reactivate. After that, account data is deleted. Operational logs are kept for 90 days. Analytics events are kept for 90 days and contain no PII.

Your rights

You can delete your account and all associated data at any time from the account settings page, or by emailing congresstradealertsapp@gmail.com. Account deletion is immediate and irreversible.

If you've already joined the waitlist and want to remove yourself, use the unsubscribe link in any email we've sent — or contact congresstradealertsapp@gmail.com.

You can also request access to or correction of your personal data by emailing us. We will respond within 30 days.

If you are in the EU, UK, or California, you also have the right to lodge a complaint with your local data protection authority.

Children

The Service is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If we materially change this policy, we will update the "Last updated" date and notify active subscribers by email.

Contact

Questions? Email congresstradealertsapp@gmail.com