Privacy Policy

Last updated: June 9, 2026

1. Introduction

Watchgar ("we," "us," or "our") operates the Watchgar financial intelligence platform. Watchgar is operated by ZENSOFT LLC, a limited liability company organized under the laws of the State of Arizona. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Your use of the service is also governed by our Terms of Use.

2. Information We Collect

We may collect the following types of information:

Account Information: Name and email address provided through Google sign-in when you create an account.
Usage Data: Information about how you interact with our platform, including pages visited, features used, and general usage patterns.
Device Information: Browser type, operating system, and device identifiers collected automatically when you access our service.
Third-Party API Keys: If you choose to connect third-party services (e.g., Alpaca for paper or live trading), we store the API keys you provide. Keys are encrypted at rest, scoped to your account, transmitted only over TLS, never written to application logs, and used solely to execute actions you request.
Brokerage Account Data: When you connect a brokerage account (such as Alpaca), we read account information needed to power the trading and portfolio views — including account equity, cash, buying power, open positions, open and historical orders, and related market data. This data is fetched on your behalf using your API keys and is used to render your dashboard, trading page, and any agents or strategies you choose to run.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Watchgar platform.
Authenticate your identity and manage your account.
Improve, personalize, and expand our products and services.
Understand and analyze how you use our platform to enhance user experience.
Communicate with you, including for customer support and service updates.

4. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties, and we do not share it with advertisers or data brokers. We share information only with the service providers and sub-processors described in Section 5, who process it on our behalf and under our instructions. We may use aggregated, anonymized data to improve our products, but this data cannot be used to identify you personally.

5. Data Sharing

We may share your information only in the following limited circumstances:

Service Providers (Sub-processors): With trusted third-party vendors who assist us in operating our platform, subject to confidentiality obligations. Current categories include: cloud hosting and database infrastructure, payment processing (Stripe), authentication (Google), brokerage integration (Alpaca), and AI model providers (e.g., OpenRouter, Anthropic, OpenAI, and Google Gemini) used to power AI features. See Section 11 for how AI providers process your data.
Legal Requirements: When required by law, regulation, legal process, or governmental request.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security & Storage

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Sensitive credentials such as third-party API keys are encrypted at rest and transmitted only over TLS. We do not write API keys or brokerage tokens to application logs.

Our application servers and primary databases are hosted with reputable cloud providers. Data may be processed in the regions where those providers operate.

In the event of a security incident that affects your personal information, we will notify affected users without undue delay and in accordance with applicable law. No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you request deletion of your data, we will remove your information within a reasonable timeframe, subject to any legal obligations to retain certain records.

8. Your Rights

You have the right to:

Access the personal information we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data.
Withdraw consent where processing is based on consent.
Request a copy of your data in a portable format.

To exercise any of these rights, please contact us at hello@watchgar.com. We will respond to your request within 30 days.

9. Cookies

We use essential cookies required for authentication and platform functionality. We do not use third-party advertising or tracking cookies.

10. Children's Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. AI Features & Third-Party Models

Watchgar uses large language models and other AI services to power features such as the Q assistant, AI-generated notebook cells, news categorization, and agent and strategy reasoning. When you use these features, your prompts and the contextual data they need (which may include the ticker you are viewing, selected news items, portfolio positions, or notebook contents) are sent to third-party AI providers — currently including OpenRouter, Anthropic, OpenAI, and Google Gemini — and may include additional providers from time to time, to generate a response.

These providers process the data under their own terms and privacy policies. We do not authorize them to use your data to train their models. We do not send your account credentials or API keys to AI providers.

If you prefer not to share data with AI providers, do not use the AI-powered features.

12. Live Trading

Watchgar allows you to connect a third-party brokerage account (currently Alpaca) to place real-money trades. Enabling live trading is entirely optional, and you must explicitly opt in by connecting a live brokerage account — either by authorizing Watchgar through Alpaca's OAuth flow or by providing live API keys. By enabling live trading, you acknowledge and accept the following:

Real money is at risk. Orders placed through Watchgar execute against your real brokerage account. Agents, custom strategies, and manual trades can all place orders automatically, including while you are not actively using the platform.
AI-driven strategies are unpredictable. Watchgar uses large language models and automated strategies that may behave in unexpected ways. Software bugs, data errors, upstream API failures, network outages, or incorrect market data can cause trades to be placed, missed, or executed at unfavorable prices.
You are solely responsible. Every order placed using your connected brokerage account — whether initiated by you, an agent, or a strategy running on your behalf — is your sole responsibility. You are responsible for monitoring your positions, managing risk, and complying with all applicable laws, tax obligations, and brokerage terms.
No investment advice. Nothing on Watchgar constitutes financial, investment, legal, or tax advice. Content produced by AI models or displayed on the platform is informational only and may be inaccurate or incomplete.
Provided "as is". Watchgar is provided on an "as is" and "as available" basis without warranty of any kind, express or implied. To the maximum extent permitted by law, ZENSOFT LLC and its operators accept no liability for any losses, missed trades, erroneous trades, lost profits, or damages of any kind arising from your use of the platform or from any live trading activity.
Live environment required. Live trading uses Alpaca's live environment, selected when you authorize via OAuth or by providing API keys issued from the Alpaca Live dashboard. Paper credentials will not authenticate against the live endpoint, and live credentials will not be used against the paper endpoint.
Revoke at any time. You can disconnect your brokerage account at any time from your account settings. Disconnecting revokes the OAuth authorization or removes the stored API keys. We recommend also revoking access from your Alpaca dashboard if you no longer want Watchgar to have access.
Brokerage data handling. Account snapshots, positions, and order data fetched from your brokerage are stored only to the extent needed to power your dashboard, agents, strategies, and trade history views. When you disconnect your brokerage account, we revoke and delete the stored access token or API keys and stop fetching new account data. You may also request deletion of any cached brokerage data by contacting us at the address in Section 14.

If you do not agree with this disclaimer, do not enable live trading. Paper trading remains available and uses simulated funds with no real-money risk.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

hello@watchgar.com