Privacy Policy

Effective September 20, 2026

A note on this document. TROY Intelligence Engine is an independent project, not a law firm, and this policy was drafted without a lawyer. It's a good-faith, plain-language description of what we actually collect and do with it — not a substitute for professional legal advice. If you have specific legal or compliance requirements (for example, you're located somewhere with rights we haven't addressed below), please contact us and we'll do our best to help.

Who we are

TROY Intelligence Engine ("TROY," "we," "us") operates the website at troyequities.com, a research and screening tool that surfaces public congressional trading disclosures, SEC insider filings, 13F institutional holdings, and FEC campaign finance data. This policy explains what personal information we collect from people who use the site, why, and what your options are.

Information we collect

We collect the minimum we need to run the service:

Account information. When you register, we store your email address and a password. Your password is never stored or transmitted in readable form — it's hashed with bcrypt before it ever touches our database, and we cannot look it up or recover it, only reset it.
Session information. When you log in, we issue a session token that keeps you logged in. It's stored on our server and tied to your account; logging out invalidates it.
Alert subscriptions. If you set up an alert (for example, "notify me if a ticker's rating crosses a threshold"), we store what you asked to be notified about. If you choose to receive alerts by text message, we store the phone number you provide for that purpose.
Notification history. We keep a record of alerts we've sent you (channel, timestamp, delivery status) so we can troubleshoot if something didn't arrive.
Information stored only in your browser. A copy of your session token, your email address, and (if you've entered one) a phone number are kept in your browser's local storage for convenience, so you don't have to re-enter them every visit. This is not a cookie, is never sent to any third party, and stays on your device — clearing it (via the "clear locally-stored data" option in Settings, or your browser's own site data controls) removes it immediately.

We do not use cookies, and we do not run any third-party analytics or advertising trackers on this site.

The market and political data on TROY is not "your" data

The congressional trades, SEC filings, 13F holdings, and campaign finance records displayed on TROY are all public government and market data about public officials, corporate insiders, and companies — sourced from the SEC, the U.S. House and Senate, the Federal Election Commission, and similar public disclosures. None of it is generated from or mixed with our users' account data, and browsing this data does not create a record tied to your identity beyond standard web server logs.

Why we collect it

To create and secure your account, and let you log back in.
To deliver the alerts you've explicitly asked for, by the channel(s) you chose.
To send you account-related email, such as a password reset code.
To keep the service reliable and secure (for example, rate-limiting abusive traffic).

We do not use your email or phone number for marketing you haven't asked for, and we do not sell, rent, or trade your personal information to anyone.

Who we share it with

We use a small number of service providers to actually run TROY. Each only receives the minimum needed to do its job:

Cloudflare — our hosting and content-delivery provider. Like any web host, it processes standard connection information (such as IP address) to serve you the site.
Our email provider — receives your email address and message content only to deliver account emails you've triggered (registration, password reset, or alerts you've subscribed to).
Twilio (only if and when SMS alerts are enabled on our end) — would receive the phone number you provided, solely to deliver a text alert you asked for.

We do not share your information with data brokers, advertisers, or any other third party, and TROY does not currently process any payment information — the service is free.

How long we keep it

We keep your account and subscription information for as long as your account is active. If you'd like your account and associated data deleted, email us at contact@troyequities.com and we'll take care of it — this is currently handled directly by us rather than through an automated "delete my account" button, since TROY is a small, independently-run project.

Your choices and rights

You can log out at any time, which invalidates your session token.
You can clear the data your browser has stored locally at any time from Settings, or your browser's own privacy controls.
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete your account entirely, by emailing contact@troyequities.com. We'll respond as promptly as we can.
If you're in a jurisdiction with specific data-protection rights (for example, the EU/UK's GDPR or California's CCPA), we'll do our best to honor requests consistent with those rights — reach out and let us know what you need.

Security

We take reasonable, standard precautions to protect your information — passwords are hashed (never stored in plain text), traffic to the site is encrypted, and access to alert/notification data requires being logged into the account it belongs to. That said, no online service can guarantee perfect security, and we can't promise it's impossible for something to go wrong.

Children's privacy

TROY is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we'll remove it.

Changes to this policy

If we make a meaningful change to how we handle your data, we'll update the effective date above. Continuing to use TROY after a change means you accept the updated policy.

Contact us

Questions, requests, or concerns about your data: contact@troyequities.com.