WAYNE CAPITAL

Privacy Policy

1. Who we are

Wayne Capital is an options-trading research publication operated by Ethan Serbantes from Austin, Texas. We send subscribers options-flow signals, market commentary, and research output through a web dashboard, Telegram bot, and Discord server. This policy explains what personal data we collect and how we handle it.

For the purposes of GDPR, Wayne Capital is the data controller for personal data we collect from subscribers. For CCPA, Wayne Capital is the business.

2. What we collect

We collect only the data we need to run the service:

• Account data: email address, hashed password (bcrypt — we never store plaintext passwords), the plan tier you signed up for, signup timestamp, last login timestamp.
• Payment data: handled entirely by Stripe. Stripe sends us a customer ID and subscription ID — we never see or store your credit card number, billing address, or full payment details. Stripe's privacy policy governs that data.
• Telegram chat ID: the numeric ID your Telegram client sends when you start a conversation with our bot. We store it so we can deliver alerts to you. We do not see your Telegram username, phone number, or contact list.
• Discord user ID: returned by Discord's OAuth flow when you connect your account. We store the numeric ID so we can grant you the right role. We do not see your Discord servers, friends, or DMs.
• Watchlist + alert preferences: the tickers you've chosen to follow, your horizon preferences, time-of-day filter, minimum confidence threshold.
• Profile picture (optional): if you upload one, it's stored as a base64 data URL in our database — we don't ship it to any third-party storage.
• Chat messages: every message you send to Wayne (our AI assistant) is logged with a timestamp so we can debug issues and enforce daily caps. See §5 for how Anthropic handles these.
• Server logs: standard web-server access logs (IP address, user agent, request path, timestamp) retained for security and abuse-prevention purposes. We do not use them for advertising.
• Risk disclosure timestamp: when you ticked the "I understand this is not financial advice" box during signup, we recorded the timestamp.

3. Why we collect it

• To create and authenticate your account (email, password hash).
• To bill you on a recurring basis (Stripe IDs).
• To deliver alerts and the research feed to you (Telegram chat ID, Discord ID, watchlist).
• To enforce tier entitlements and daily caps (plan tier, chat usage counter).
• To debug issues, prevent abuse, and protect the service (server logs, chat logs).
• To prove acknowledgement of our risk disclosure if a dispute arises (disclosure timestamp).

We do not collect data to sell, profile, or advertise.

4. Who we share it with

We share data only with the service providers we need to run Wayne Capital. Each one has its own privacy policy that governs what they do with the data:

• Stripe (payment processing) — receives your email, billing address, and card details directly from you during checkout. We receive a customer ID and subscription ID back.
• Anthropic (Claude AI) — when you chat with Wayne, your message is sent to Anthropic's Claude API to generate the reply. Anthropic processes the request and discards it per their API data handling policy (no model training on API inputs as of this policy's effective date). See Anthropic's privacy policy.
• Telegram — if you connect Telegram, our bot sends alerts to your chat ID via Telegram's Bot API. Telegram's policies govern the message delivery layer.
• Discord — if you connect Discord, our bot manages your role on the Wayne Capital server. Discord's policies govern the platform.
• Railway (infrastructure) — our backend, database, and logs are hosted on Railway. Railway is a data processor only.
• Schwab / market data providers — we send no personal data to market data providers. Schwab API access is for market data only; it does not see your identity.

We do not sell your personal data to anyone. We do not share it for advertising purposes. If we ever receive a valid legal request (subpoena, court order), we will comply only to the minimum extent legally required, and where legally permitted, we will notify you.

5. How AI chat handles your messages

Wayne Capital's chat assistant is powered by Anthropic's Claude — a general-purpose AI model that Anthropic provides through their API. When you send a chat message, we attach live market context (current prices, recent signals, news headlines relevant to the tickers in your question) and forward the prompt to Anthropic. Anthropic processes the request and returns a reply, which we display back to you.

Anthropic's policy on API data (as of this policy's effective date) is that they do not use API inputs or outputs to train their models, and they retain the data only for the duration required to deliver the response plus a short safety/abuse-review window. See Anthropic's data processing terms for current details.

We do not pre-screen the content of your chat messages with any other third party. We do log them on our own server (see §2) for the reasons listed in §3.

6. How long we keep it

• Account data: for as long as your account exists. If you delete your account, we delete your account data within 30 days, except where retention is legally required (e.g., financial records for tax purposes).
• Payment records: 7 years for tax/accounting compliance.
• Chat logs: 90 days for debugging and abuse prevention, then deleted.
• Server logs: 30 days.
• Signal history (the alerts the engine fired): retained indefinitely as part of the public track record. These contain no personal data — only ticker symbols, prices, timestamps, and outcomes.

7. Your rights (CCPA / GDPR)

Regardless of where you live, you have the following rights with respect to your personal data:

• Right to access: ask us what personal data we hold about you. We'll provide a copy.
• Right to correct: ask us to fix inaccurate data.
• Right to delete: ask us to delete your account and associated personal data.
• Right to portability: receive your data in a machine-readable format.
• Right to opt out of sale: not applicable — we don't sell personal data.

To exercise any of these rights, email privacy@waynecapital.io from the email on your account. We'll respond within 30 days.

California residents (CCPA): you have the additional right to know what categories of personal information we've collected, sold, or disclosed in the past 12 months. As stated above, we do not sell personal information. The categories we collect are described in §2.

EU/UK residents (GDPR): the legal basis for our processing is the contract you enter into when you subscribe (Art. 6(1)(b)), our legitimate interests in running and securing the service (Art. 6(1)(f)), and your consent for optional features like the AI chat (Art. 6(1)(a)). You have the right to lodge a complaint with your local data protection authority.

8. Cookies + local storage

Wayne Capital uses minimal local storage to keep you signed in. Specifically:

• A JWT auth token stored in your browser's localStorage after you sign in. Cleared on logout.
• UI preferences (chosen timeframe, last viewed ticker, etc.) stored in localStorage for convenience.

We do not use third-party advertising cookies, tracking pixels, or analytics services that profile you across sites. We do not need a cookie banner because our cookies are strictly necessary for the service to function.

9. Security

We hash passwords with bcrypt. We use HTTPS for every connection. Our backend is hosted on Railway, which provides infrastructure-level security. We rotate API keys for third-party services regularly. No system is 100% secure — if we discover a breach affecting your data, we will notify affected users within 72 hours.

10. Children

Wayne Capital is not directed at children under 18 and we do not knowingly collect data from anyone under 18. If we learn we've collected data from a minor, we will delete it.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify subscribers by email and post the updated policy here with a new "Last updated" date. Continued use of Wayne Capital after a policy change constitutes acceptance of the updated terms.

12. Contact

Privacy questions: privacy@waynecapital.io
General support: support@waynecapital.io