Privacy Policy

1. Who we are

IntellaZone (www.intellazone.com) is an educational market-research platform. This policy describes what personal information it collects, why, who else receives it, how long it is kept, and what you can do about it. It covers the website and the app installed from it.

Questions about privacy, and any request this policy mentions, reach IntellaZone through the support form. Membership terms are on the Terms of Service page.

2. When you create an account

• Your email address, to sign you in, confirm the address, reset your password and send account and billing messages.
• Your password, stored only as a one-way bcrypt hash. Nobody at IntellaZone can read it. Confirming your email address asks for the password once more, so a confirmation link sent to someone else's inbox cannot take over an account.
• A display name, if you give one.
• When the account was created, when you last signed in, when you confirmed your email and when you accepted the terms.
• An account can also be made for an address by an admin's invitation. The invited account then also records who invited it and when, and the email carries a link to set a password that lasts 7 days. The admin's list of the invitations sent keeps each address until the account at that address is deleted (the list keeps the newest 200).

3. When you sign in

• A session record holding the network (IP) address and the browser's user-agent string it was opened from, and when it expires. Sessions last 14 days or until you sign out, and Account → Security can end every session at once.
• One cookie, iz_session, which keeps you signed in. It is strictly necessary, cannot be read by the page's scripts, is sent only over HTTPS, and is not used for tracking or advertising. IntellaZone sets no other cookie.
• Failed sign-in, sign-up, reset and confirmation attempts are counted to stop password guessing. Only one-way salted hashes of the email and network address are stored for this, never the address itself, and they are deleted after two days.
• Changing your password through a reset link signs out every device and turns off every share link and spreadsheet link on the account.

4. What you save in the app

Stored on your account so it follows you across devices:

• watchlists, with your notes, flags and columns;
• portfolio positions (symbol, shares, average cost), your targets and your own labels for holdings;
• price alerts, alerts drawn on the chart, alerts on events, and your alert settings (quiet hours, a weekly ceiling, how alerts reach you);
• chart drawings, chart settings, layouts and templates;
• saved screens, screens you register and their forward record;
• trade plans and journal entries: entries, stops, targets, fills, notes, mistake tags, debriefs and results. Trades imported from a broker's file are read from the file in your browser; only the trades are sent, never the file;
• academy progress, quiz and simulator results;
• expectations you record before a company reports;
• account settings (theme, account size, risk limits) and which first-week steps you have completed;
• if you turn on push alerts, the address and keys your browser gives for delivering them, or, in the TSP Fortune app on a phone, the push token the phone gives through Google's Firebase Cloud Messaging and whether the phone is an iPhone or an Android phone; for each device, its user-agent and whether you asked for the morning read.

Kept only in your browser and never sent to IntellaZone, unless you use an AI feature that sends it (section 7): the retirement profile (age, salary, balance, goals), net worth, paycheck templates, TSP and 401(k) entries, the paper portfolio, the written trading plan from the academy, recent symbols and reading history, a random identifier for the device, and, on TSP Fortune while their "Kept in this browser" switches are on, the retirement dates and pay entered once (date of birth, service computation date, annual basic pay, planned retirement date) and the figures typed on Contributions and the IRS limit. Clearing the browser's site data removes them.

5. When you buy a membership

• Payments are handled by Stripe. Card details go directly to Stripe; IntellaZone never receives or stores them.
• IntellaZone stores the Stripe customer reference, the plan, its status, renewal and trial dates, and a log of Stripe's events for the account (the event type and its outcome, including refunds and disputes; never card data). A full refund or a card dispute ends the membership.
• Before checkout you agree to the renewal terms. The record of that agreement keeps the words you agreed to, their version, the time, the browser's user-agent and a one-way hash of the network address, as proof of what was agreed.

6. The support form and email sign-ups

• The support form stores the email address you type, the subject and the message, and your account if you are signed in. A copy of the message may be emailed to IntellaZone. The network address is not stored; a one-way hash of it is used for a short time to stop abuse.
• "Email me the read" on a pre-registered read stores your email address to send that one result.
• "Tell me when it opens" on the membership page stores the email address you give it.
• When an address is left on the list, a read alert is asked for, an account is made or a support request is sent, the site may email its owner a note with that address.

7. The AI features

When you use an AI feature (the desk assistant, insights, the trade planner's note, the portfolio and retirement readings, second opinions), what you type is sent to Anthropic, the provider of the Claude models, together with the context that feature needs. Depending on the feature that context can include your last few messages in the conversation, your watchlists, your portfolio's holdings, weights and gains, your alerts, a trade plan's details, and, on the retirement pages, the age, salary, balance, contribution, risk tolerance and goals you entered there, or your 401(k) fund weights.

IntellaZone does not store your questions or the answers. It records, for each request, which feature was used, which model answered, how many tokens it used and what it cost, to manage usage. Anthropic handles the content under its commercial terms, which do not permit it to train its models on that content.

The AI features are optional. Nothing is sent to Anthropic from a page you only read.

8. The emails IntellaZone sends

• Account messages: confirming your address, resetting a password, a notice when someone tries to sign up with an address that already has an account, and a notice when the password changes.
• Membership messages: renewal and trial-ending reminders, the yearly renewal reminder and cancellation confirmations.
• The weekly record on Sundays, on by default; turn it off in Settings → Notifications.
• Two one-time messages in the first week: a note on day five and the first read.
• Alert emails, when an account has no device taking push alerts; the choice is in the alert settings.
• Only if you ask for them: the morning email on trading weekdays, the weekly review of the market on Sundays, the monthly review on the 1st, the monthly receipt, the monthly portfolio email (it summarises your holdings), a saved screen's nightly results and a pre-registered read's result.

There is no marketing list and no newsletter, and no address is given to anyone to send their own mail. Email is delivered by Resend.

9. What others can see

Nothing in your account is public unless you make it so:

• A journal share link shows your results in R, by month, and each closed trade's debrief and mistake tags. It shows no name, no notes and no email address.
• An academy share link shows the first name you choose and your progress.
• A spreadsheet link gives anyone holding it your watchlists with notes, your positions with shares and cost, and your screens' names.
• Each of these links can be turned off at any time, and a password reset turns them all off.
• The public alert ledger publishes counts only, and only where a count covers at least five alerts from at least three members, so no one member's alerts can be picked out.

10. What IntellaZone does not do

• It does not sell personal information, and it does not share it for advertising, including cross-context behavioural advertising.
• It runs no advertising, no analytics service, no tracking pixels and no session recording.
• It never asks for brokerage credentials, bank logins, a Social Security number or a financial account number, and it does not link to bank accounts.

11. Service providers

These companies process data on IntellaZone's behalf, only to provide the service:

Some things are loaded by your browser directly from another company, which therefore sees your network address and browser: the site's typefaces from Google Fonts, company logos from Financial Modeling Prep, the TradingView chart on the retirement pages (which may set its own cookies), and academy video thumbnails from YouTube, whose player (the privacy-enhanced youtube-nocookie.com) loads only when you press Play. Their own privacy policies apply to those requests.

IntellaZone's own social channels post platform cards built from public data. No member's data is posted.

12. How long it is kept

• Account data: while the account exists.
• Sessions: 14 days or until you sign out; expired sessions are deleted nightly. Failed-attempt counters: two days. Email confirmation links last 48 hours, invitation links 7 days and reset links one hour, are stored only as hashes, and are deleted a week after they expire.
• When an account is deleted, everything attached to it is deleted at once (section 13). Copies can remain in the database provider's backups until those backups expire on its rolling schedule; they are not restored except to recover from a failure.
• Kept after deletion, with the account removed from them: the renewal agreements and the payment event log (bookkeeping, tax and disputes), the log of which emails were sent, support messages and "Email me the read" requests. To have a support message or a sign-up removed, ask through the support form.
• If an account ever reached checkout, a keyed one-way hash of its email address and its Stripe customer reference are kept after deletion so the same person cannot start a second free trial.
• Addresses left under "Tell me when it opens" are kept as the site's record of who asked, are used for the one email sent when membership opens, and are removed on request through the removal link in that email or through the support form.

13. Your choices and rights

• See and change what you saved, in the app.
• Download a copy of your data from Account → Your data: a JSON file of what is stored for your account. Left out on purpose: secrets that would let someone act as you (session tokens, push keys, link tokens, the password hash), the payment processor's event log and internal bookkeeping identifiers, an admin's list of the invitations sent (it holds other people's addresses), and who invited an invited account (the file says only that it was invited, and on which day).
• Delete your account from Account → Your data, with your password. A membership must be cancelled first. Everything attached to the account is deleted except what section 12 lists.
• Cancel a membership at any time from Account → Manage billing.
• Turn off emails in Settings → Notifications, push alerts in Settings or in the browser, and any share or spreadsheet link from where it was made.
• Sign out of every device from Account → Security.

Depending on where you live, the law may give you rights to know what is held about you, to receive a copy, to correct it, to delete it and to opt out of its sale or sharing. IntellaZone gives every member these choices through the account, wherever they live. Anything the account cannot do, ask through the support form; requests are answered within 45 days, and exercising a right never changes the price or the service you receive. IntellaZone does not sell or share personal information, so there is nothing to opt out of, and a browser's Global Privacy Control signal is consistent with how the platform already works.

14. Security

Passwords are hashed with bcrypt. Sessions are checked against the database, and one that is ended stops working within a minute. Sign-in and sign-up are rate-limited. The database's tables are closed to direct access from the browser. No method of storage or transmission is perfectly secure; if a breach puts your information at risk, you will be told as the law requires.

15. Children

IntellaZone is not directed at children under 13 and does not knowingly collect information from them. If you believe a child has created an account, ask through the support form and it will be deleted.

16. Where data is processed

IntellaZone and its providers process data in the United States. Using the platform from elsewhere means your information is transferred to and processed in the United States.

17. Changes to this policy

Changes are posted on this page with a new date at the top. A change that materially affects how your information is collected, used or shared is emailed to account holders before it takes effect.