Privacy Policy

Last updated: May 2025

Shorti is an investment scanning and alerting tool. This policy explains what data we collect, how we use it, and what third-party services we rely on.

What we collect

Your email address and hashed password, used to authenticate your account.
Your Alpaca API credentials, stored encrypted at rest and never shared.
Your Gmail app password, stored encrypted at rest and used only to send you alerts.
Your scanner settings (watchlist, thresholds, preferences).
A log of trade opportunities generated for your account.

What we do not collect

We do not sell or share your data with third parties for advertising.
We do not store payment information — billing is handled entirely by Railway.

Bot protection — Cloudflare Turnstile

We use Cloudflare Turnstile on the registration page to silently verify that you are a human. Turnstile runs in the background — real users see nothing. By registering for an account you acknowledge that Cloudflare may process limited browser signals (such as interaction patterns) for this purpose. See the Cloudflare Turnstile Privacy Addendum for full details of what Cloudflare collects and how it is used.

Data retention

Your account data is retained for as long as your account is active. Resolved trade opportunities older than 30 days are automatically removed. You can request deletion of your account and all associated data by emailing us.

Security

Credentials are encrypted using AES-256 (Fernet) before storage. Passwords are hashed using bcrypt and never stored in plain text. All traffic is served over HTTPS.

Not financial advice

Shorti generates signals from technical indicators only. Nothing on this platform constitutes financial advice. You are solely responsible for any trades placed.

Contact

Questions about this policy? Email us at darylianwalker@gmail.com.