Privacy Policy

Last updated: 25 August 2026

What we collect

• Account details — your email address, an optional display name, and a hashed password. We never store your password in readable form.
• Your research — the questions you ask and the answers the agents produce, so your history is there when you come back.
• Portfolio holdings — only if you choose to add or import them. This is optional and Alpha Hive works fully without it.
• A session cookie — a single httpOnly cookie that identifies your session. It is strictly necessary for the service to function, so no consent banner is required for it. We use no advertising or third-party tracking cookies.

Your Groww access token

If you import holdings using a Groww access token, that token is used for the duration of that single request and is never written to our database or logs. If you upload a statement instead, the file is parsed in memory and discarded.

How we use it

Only to run the service: to answer your questions, to ground those answers in your holdings when you ask portfolio questions, and to keep your history. We do not sell your data, and we do not use it to build advertising profiles.

Third parties

To answer a question we send the text of that question, and relevant market data, to our language-model provider. We also read public market data from providers such as Yahoo Finance, Finnhub, Twelve Data and Marketaux. Your email address and password are never shared with any of them.

Retention

We keep your data until you delete it. Anonymous sessions are tied to a browser cookie; if you clear it without creating an account, that data becomes unreachable.

Your rights

Under India's Digital Personal Data Protection Act and the GDPR you can access, export and erase your data. Both are self-service: go to Account and use Export my data or Delete account. Deletion is immediate and permanent.

Security

Passwords are hashed with bcrypt. Session cookies are httpOnly, SameSite=Lax and HTTPS-only in production, so they cannot be read by JavaScript. Data is transmitted over TLS.

Contact

Questions about this policy, or a data request you cannot complete yourself? Reach us through the contact address published on our repository.