Privacy Policy

1. Introduction

AlertHero ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our notification tracking and enrichment service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and authentication credentials through Firebase Authentication.

2.2 Notification Data

When you install our Android agent on your device, we collect:

• Notification titles and content from installed applications
• Timestamp of when notifications were received
• Package names of applications sending notifications
• Device identifiers for authentication purposes

2.3 Device Information

We may collect device information including:

• Device model and operating system version
• IP address
• Connection timestamps
• Agent version information

2.4 Enriched Data

We automatically enrich notification data by extracting:

• Stock tickers and cryptocurrency symbols
• Sentiment scores
• URLs and topics
• Market price information from public APIs

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our service
• Process and enrich notification data
• Authenticate devices and users
• Monitor service performance and prevent abuse
• Send service-related communications
• Improve and develop new features

4. Data Retention

We retain your data as follows:

• Active Account: Notification data is retained for 90 days while your account is active.
• Deletion Requests: When you request data deletion, we retain a backup for 30 days before permanent deletion.
• Paused Account: If your account is paused, data is retained for up to 180 days.

5. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Encryption of data in transit using TLS/SSL
• Tenant-level data isolation
• Device authentication using JWT tokens and HMAC signatures
• Regular security audits and monitoring
• Access controls and logging

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following circumstances:

• Third-Party Services: We use Firebase for authentication and may use market data APIs to enrich notifications.
• Legal Requirements: We may disclose information if required by law or to protect our rights.
• Service Providers: We may engage trusted service providers who assist in operating our service, subject to confidentiality agreements.

7. Your Rights

You have the right to:

• Access: Request a copy of your data
• Export: Export your data in JSON or CSV format
• Deletion: Request deletion of your data (30-day grace period)
• Pause: Pause notification capture at any time
• Revoke: Revoke device access and credentials

8. PII Detection

Our system automatically detects and flags potentially sensitive information in notifications, including:

• One-time passwords (OTPs)
• Password-related content
• Potentially sensitive data patterns

You can enable PII masking in your settings to redact this information from stored notifications.

9. Cookies and Tracking

We use essential cookies and local storage to maintain your session and authentication state. We do not use third-party tracking or advertising cookies.

10. Children's Privacy

Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: