This Privacy Policy describes how Alcony, Inc., a Wyoming corporation ("Alcony," "we," "us," or "our"), collects, uses, and shares personal information in connection with our AI-assisted forecasting and decision-support platform (the "Services") and our website. This Policy applies where Alcony is the controller of your personal information. If you access the Services as an end user through an organization that has a separate enterprise agreement with Alcony, that organization's instructions to us as processor — and, where applicable, our Data Processing Addendum with that organization — govern our handling of your data, and you should also review that organization's own privacy notice.
1. Information We Collect
Account and authentication data. When you create an account, we (through our authentication provider, Firebase) collect your name, email address, and, if you sign in with a third-party identity provider (e.g., Google or Apple), the identifiers those providers share with us.
Payment data. When you purchase a subscription or Credits, our payment processor (Stripe, once enabled) collects and tokenizes your payment information. Alcony does not store full payment card numbers.
Content you provide. Information you enter into the Services, including the text of your questions, your predictions, notes, assumptions, and constraints, the contents of decision landscapes you create, and documents you upload for AI-assisted processing (collectively, "User Content").
Usage and prediction history. Records of your Credit consumption and your prediction history, including how your predictions and Aggregate Scores compare to actual outcomes over time. We collect and retain this information because it is what powers the calibration and track-record features of the Services — it is core product functionality, not incidental analytics.
Device and log data. Standard technical information such as IP address, browser and device information, and interaction logs.
Cookies and similar technologies, as described in Section 5.
2. A Note on the Content You Share With Us
Alcony is not, on its face, a "sensitive" product — it is a forecasting and decision-support tool. But the substance of what people forecast on can be personally significant: career moves, financial decisions, health choices, or relationship decisions. To our systems, a question about whether to take a new job and a question about a product launch date look the same — both are simply "a question." We want to be direct about this rather than treat all User Content as generic application data: we do not sell your User Content, and we do not repurpose the substance of your questions, predictions, or documents for advertising or for any use unrelated to providing and improving the Services to you, as further described in Sections 4 and 6.
3. How We Use Information
We use the information described above to:
Provide, secure, maintain, and improve the Services, including generating AI Analyst predictions, Aggregate Scores, Calibration Scores, and Posture Recommendations;
Process payments and manage your subscription and Credits;
Communicate with you about the Services, including support, security notices, and service updates;
Detect, investigate, and prevent fraud, abuse, and violations of our Acceptable Use Policy;
Comply with legal obligations and enforce our agreements; and
With appropriate safeguards, conduct aggregated or de-identified analysis to understand and improve the Services.
4. AI Processing and Model Providers
Certain features rely on artificial intelligence, provided through two channels: (a) OpenAI, accessed via API, and (b) Alcony's own models, served through a third-party inference-hosting provider. Both are listed in our Subprocessor List.
Data minimization is a designed safeguard, not an afterthought. What we send to these AI providers is scoped to the content needed to generate a prediction or process a document — such as your question text and directly relevant supporting context (for example, an excerpt from a document you uploaded) — rather than your account identity, contact information, or profile. The only exception is where the substance of your own question happens to include personal details you chose to enter (for example, if your question itself names a person). We describe this distinction in more technical detail, including the defined terms we use for it, in our AI & Data Terms.
Training. We do not use the content of your Inputs or Outputs to train the general-purpose models of our third-party AI providers. The one exception is web search for Automated updates. If you turn on Automated updates for a question (in its Scheduling panel), Alcony searches the web for news about it using Tavily, a search provider. To do this we send Tavily the specific text of your question, sometimes with search words added (for example "latest news"), and, if the question has a description, the first 150 characters of that description. We don't send your name, email address, predictions, documents or anything else from your landscapes. Tavily's terms allow Tavily and its AI providers to keep the queries it receives and use them to train and improve AI models. If a question's wording is confidential, don't turn on Automated updates for it. Automated updates are off unless you turn them on, and you can turn them off at any time. See the AI & Data Terms for the details applicable to how Alcony's own models are developed and improved.
5. Cookies and Tracking Technologies
We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookies through your browser settings; disabling certain cookies may affect functionality. [Add a cookie table and/or consent banner mechanics once the jurisdictions Alcony serves at launch are finalized.]
6. How We Share Information
Subprocessors who help us operate the Services — including our AI providers, authentication provider, payment processor, and hosting/infrastructure providers — see our Subprocessor List.
Professional advisors, auditors, and regulators, as required.
In connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality protections.
When required by law, or to protect the rights, safety, and property of Alcony, our users, or others.
We do not sell personal information, and we do not share User Content with third parties for their own advertising or marketing purposes.
7. Data Retention
Alcony's calibration and track-record feature is core to the product — the ability to see whether you are "actually good at this" over time depends on retaining your prediction history and its relationship to actual outcomes. Because of this, we do not apply the very short retention windows or aggressive anonymization some other products use, since doing so would defeat the feature's purpose.
What deletion and export do and do not do. If you delete a question, document, or your account, we remove the associated User Content from active systems within the timeframes described below, subject to residual copies in encrypted backups (deleted on our standard backup rotation) and to anything we must retain for legal, security, or dispute-resolution purposes. Where deleting the full record of a past prediction would also erase the accuracy signal underlying your historical Calibration Score, we retain the minimum data needed to preserve the accuracy of your own historical score (for example, whether a past prediction proved correct) even where you delete the underlying question text; we do not use that residual data for any other purpose. You may request an export of your User Content at any time. If you close your account, we will delete your User Content within 30 days of account closure, or earlier upon your request, subject to the exceptions above. [Confirm exact retention periods and the deletion cascade with engineering before publishing — see the parallel note in the Data Processing Addendum.]
8. Data Security
We maintain technical and organizational safeguards described in our Security Overview, including encryption in transit and at rest, access controls, and monitoring.
9. Your Rights and Choices
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal information, or to opt out of certain processing (for example, under the CCPA/CPRA if you are a California resident, or the GDPR/UK GDPR if applicable to you). Alcony's state of incorporation (Wyoming) does not itself determine which privacy laws apply to you — it is your location and the location of the Services' users that governs. To exercise these rights, contact privacy@alcony.io. If you are an end user accessing the Services through an organization with its own enterprise agreement with Alcony, your request may need to be directed to that organization, since Alcony acts as its processor with respect to your data in that context.
10. International Data Transfers
Alcony is based in the United States, and personal information is generally processed in the United States. Where we or our subprocessors transfer personal information from the European Economic Area, United Kingdom, or Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses, consistent with our Data Processing Addendum.
11. The Kalshi Feature (Forward-Looking)
Alcony intends to offer an optional feature that lets you connect your own Kalshi account and place real-money orders directly from Alcony (see the Consumer Terms of Service). This feature is not yet released. When it launches, this Policy will be updated to describe, among other things: storage of your Kalshi API credential (which will be encrypted, since the Kalshi Feature is designed to be non-custodial — Alcony relays orders on your instruction but never holds your funds), and import of your Kalshi order and trading history into the Services. We are flagging this here as a near-term addition rather than drafting it against a feature that has not shipped.
12. Children's Privacy
The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from anyone under 13 (or 16 where applicable law requires a higher threshold). If you believe a child has provided us with personal information, contact us at privacy@alcony.io and we will investigate and, if appropriate, delete it.
13. Changes to this Policy
We may update this Policy from time to time; the "Last Updated" date reflects the most recent revision. We will provide notice of material changes as required by law.
14. Contact Us
Questions about this Policy: privacy@alcony.io, Alcony, Inc., Address.