Privacy Policy

Last updated: July 2026

Dragon Alpha Labs ("we", "us", "our") operates dragonalphalabs.com. This policy explains what information we collect, how we use it, and your rights.

Information we collect

• Account information — your username, email address, and password (hashed) when you create an account.
• Payment information: billing details are collected and processed by Stripe. We do not store card numbers, CVC codes, or bank account details on our servers. We store your Stripe customer ID, subscription status, limited card details from Stripe (brand, last four digits, and card fingerprint), and billing address so we can manage subscriptions and prevent repeated free-trial abuse.
• Uploaded files — spreadsheet files you upload for analysis are processed in memory and discarded immediately after processing; we do not store the original file. If you choose to save an analysis, we store the computed results (statistics and breakdowns) along with any name, symbol, interval, or notes you provide, so you can revisit it later from "My Tools."
• Usage data — server logs record request timestamps, file sizes, and analysis outcomes for security monitoring and debugging. These logs do not contain spreadsheet contents.
• Visit data — we record basic first-party visit information (IP address, page path, the referring website, and any campaign tags such as utm_source in the link you followed) so we can understand how people find the site and which pages are useful. This is measured on our own servers; we do not use third-party analytics or advertising trackers.
• Communications — if you contact us, we store the name, email address, and message content you provide.

How we use your information

• To provide, maintain, and improve the service
• To process payments and manage your subscription via Stripe
• To send transactional emails (subscription confirmation, payment receipts)
• To respond to support requests
• To detect and prevent abuse or unauthorized access

Third-party services

Stripe — payment processing. Your payment details are governed by Stripe's privacy policy.

Resend — transactional email delivery. Your email address is transmitted to Resend to deliver account and billing emails.

Data retention

Account data is retained for as long as your account is active. Uploaded spreadsheets are not retained after processing; saved analyses (see above) are retained until you delete them or your account. Server logs are retained for up to 90 days. You may request deletion of your account and associated data by contacting us.

Cookies and tracking

We use a session cookie to keep you logged in. We do not use third-party advertising trackers or analytics services.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at our contact page. Subscription cancellations do not automatically delete your account — please contact us separately if you want your data removed.

Security

We use HTTPS, hashed passwords, and brute-force login protection. Payments are handled entirely by Stripe. No cardholder data passes through or is stored on our servers.

Contact

Questions about this policy? Use our contact form.