Privacy Policy

Who we are

NorrisAI AlphaLens is a research website and web app operated by Jim Norris in Memphis, Tennessee. This policy covers norrisai.us and the AlphaLens app at /app/.

What this product is

AlphaLens is an educational research tool. It is not a bank, broker, or investment adviser. Paying for access does not create an advisory relationship.

Information we collect

• Account / purchase data collected by Stripe — email, plan type, payment status, and the access code needed to unlock the app. Stripe handles card data directly; NorrisAI does not store full card numbers.
• Access codes you enter in the app, so we can check that a session is paid or on trial.
• Tickers and framework choices you submit in the app — this is the query we send to data sources and to the AI provider to generate output.
• Technical logs — IP address, user agent, timestamps, error traces, pages requested. Standard server logs, kept only as long as needed to run and debug the site (typically 30–90 days, longer if needed for security or abuse investigation).
• Local device storage — the homepage investment-disclaimer acknowledgment is stored in your browser's localStorage (key norrisai_disclaimer_v1) so you aren't shown it every visit. Similar UI-preference storage may be used elsewhere in the app.
• Calculator inputs at /tools/ — processed in your browser. We do not treat these as an account profile.

We do not collect Social Security numbers, brokerage account logins, or your actual portfolio holdings.

How we use it

• Provide the trial and paid access
• Generate the research output you requested
• Fix bugs, prevent abuse, keep the service up
• Email you operational messages related to your purchase or access code. We do not currently send a separate marketing newsletter beyond Stripe's own purchase receipts.

Who we share it with

• Stripe — to process payment and trials and deliver your access code.
• Anthropic, PBC — the AI processor we use to generate research output. See "AI processors" below for what's sent and why.
• Our hosting provider, as a consequence of running a website.
• Law enforcement or courts, if required by law.

We do not sell personal information. We do not run third-party advertising trackers on the marketing site as of this date. If that changes, this section will be updated first.

Security

We use HTTPS, access-code controls, and least-data-needed practices for each framework run.

AI processors

When you run a framework, NorrisAI sends the ticker, the selected framework id, and retrieved public excerpts (current prices, SEC filing passages, current headlines) to Anthropic solely to generate that write-up.

Current processor as of this date:

• Anthropic, PBC (Claude API): sole generation model in production

We do not send brokerage logins, portfolio holdings, payment card data, or Social Security numbers to any AI provider. Stripe handles payments. Anthropic acts as a processor and may use its own subprocessors. Retention on Anthropic's systems follows Anthropic's commercial API terms. Anthropic does not train on this commercial traffic under the terms we use.

The AI provider can change. This page is the source of truth. If the processor changes, the "Last updated" date changes with it.

We do not sell personal information. As of this date we do not run third-party advertising pixels.

Don't paste secrets, account numbers, or anyone else's private data into the app. Output can be wrong — see the Terms of Use for more on that.

Cookies / local storage

We're not aware of any advertising cookies on the site. What is stored: the homepage disclaimer acknowledgment (localStorage) and session/access-code state needed to run the app. We haven't implemented a granular cookie-consent banner, so this section just describes what's actually stored rather than claiming a consent mechanism we don't have.

How long we keep it

• Purchase records — as long as needed for taxes and to honor paid or lifetime access. Years, not days.
• Server logs — typically 30–90 days.
• App query logs — kept long enough to debug the product and prevent abuse, then deleted or anonymized. We don't claim every ticker search is deleted the instant you close the tab.
• Account / email — retained while your subscription or trial is active and as needed for records. Request deletion at the contact email below.
• Data sent to Anthropic — retained on Anthropic's systems per their commercial-API terms. Anthropic does not train models on this data. See "AI processors" above.

Data breach notification

If a breach affecting your personal information occurs, we will notify affected users and applicable regulators as required by law.

Your choices

Email jim.norrisai.us@gmail.com to ask what we have, correct an email address, or request deletion of account-associated data. We'll need to verify you control that email address. We may retain records we're legally required to keep, such as purchase and fraud records. Stripe has its own privacy policy; billing-related deletion requests may also need to go to Stripe directly.

Children

This service is not directed at children under 13, and we don't knowingly collect information from them.

International use

The service is operated from Tennessee, United States. If you use it from elsewhere, your data is sent to and processed in the US.

Changes

We'll update the "Last updated" date above when this policy changes. Material changes get a note at the top of this page. Continued use of the service after that date means you accept the revised policy.

Contact

Jim Norris — NorrisAI
Memphis, Tennessee
jim.norrisai.us@gmail.com