TROY Capital LLC ("TROY," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the TROY Capital platform at troyai.co (the "Website") and the Troy — Finance AI Chrome Extension (the "Extension"). Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.
This policy covers two separate products: (1) the TROY Capital web platform and (2) the Troy Chrome Extension. Each section below addresses the specific data practices for that product.
Account Information. When you create an account, we collect your name, email address, and authentication credentials through Clerk, our third-party authentication provider. We do not store raw passwords.
Usage Data. We automatically collect information about how you interact with the platform, including pages visited, features used, course progress, simulator activity, and session timestamps. This data is used to improve your experience and monitor platform performance.
AI Conversation Data. Messages you send to the Troy AI are processed through OpenAI's API (GPT-4o). These messages may be logged for quality improvement, compliance, and safety purposes. Do not share sensitive personal or financial information (such as account numbers or Social Security numbers) in AI conversations.
Portfolio Simulator Data. Your simulated portfolio — trades, positions, cash balance, and performance history — is stored locally in your browser via localStorage and is not transmitted to or stored on our servers.
Communications. If you contact us via email, we collect your name, email address, and the content of your message.
We use the information we collect to: provide, maintain, and improve the platform; authenticate your identity and manage your account; personalize your learning experience; process AI requests and return responses; monitor platform performance and prevent abuse; communicate with you about your account or our services; comply with legal obligations.
Clerk (Authentication). We use Clerk to manage user accounts and authentication. Clerk may collect your name, email, and login activity. See Clerk's privacy policy at clerk.com/privacy.
OpenAI. AI chat messages are processed by OpenAI. OpenAI may use conversation data in accordance with their API data usage policies. See openai.com/privacy.
Vercel. Our platform is hosted on Vercel. Server logs and request metadata may be retained by Vercel in accordance with their privacy policy at vercel.com/legal/privacy-policy.
Neon (Database). User account data may be stored in Neon's managed PostgreSQL service. See neon.tech/privacy.
We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. AI conversation logs may be retained for up to 90 days for safety and quality review purposes.
We implement industry-standard security measures including HTTPS encryption in transit, secure authentication via Clerk, and access controls. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
The TROY Capital platform is intended for users of all ages, including students as young as 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child under 13 has provided us personal information, please contact us at nadavminkowtiz@gmail.com and we will delete it promptly.
Depending on your location, you may have rights including: access to the personal data we hold about you; correction of inaccurate data; deletion of your account and associated data; objection to or restriction of certain processing; data portability. To exercise any of these rights, contact us at nadavminkowtiz@gmail.com. We will respond within 30 days.
The Troy Chrome Extension is a browser extension that places a floating AI assistant on web pages. It reads the content of pages you visit to provide financial analysis and context. It also monitors trade order pages on supported brokerage sites (Robinhood, Schwab, Fidelity, E*TRADE, Webull, Coinbase, Binance) to provide optional risk assessments before order submission.
Page Content. When you open the Troy chat panel, the Extension reads visible text content from the current page (up to 3,000 characters) and sends it to our proxy server at clickflo.ai/api/troy along with your question. This content is used solely to generate a relevant AI response and is not stored beyond the duration of the API call.
Trade Data. On supported brokerage sites, the Extension may detect order form fields (ticker symbol, order type, quantity, price) for the purpose of generating a trade risk assessment. This data is sent to our proxy server to process the AI analysis and is not stored, logged, or shared with any third party beyond OpenAI's API processing.
Extension Settings. User preferences (trade interception on/off, nudge on/off) are stored locally using Chrome's storage.local API and never transmitted to our servers.
No Browsing History. The Extension does not track, record, or transmit your browsing history. It does not collect data from pages where the Troy panel has not been opened by the user.
storage. Used to save your Extension settings (trade interception toggle, nudge toggle) locally in your browser. No data is synced to external servers.
host_permissions (<all_urls>). Required to inject the Troy floating button and panel onto web pages, and to read page content when you initiate a conversation. This permission does not grant us access to your data on all sites — it only enables the Extension to function on any page you choose to use it on.
content_scripts. Used to inject the Troy interface and detect trade forms on supported brokerage pages.
All AI requests from the Extension are routed through our proxy server at clickflo.ai/api/troy. This proxy exists to avoid exposing API keys in the client. The proxy transmits your message and page context to OpenAI's API and returns the response. We do not log, store, or analyze Extension conversation content beyond what OpenAI processes in accordance with their API data policies.
All data is transmitted over HTTPS. No Extension data is sold, rented, or shared with advertisers or data brokers.
The Extension does not collect: your browsing history; financial account numbers, passwords, or credentials; personal identification information; location data; camera or microphone data; data from pages where the Troy panel has not been opened. We collect only the minimum data necessary to provide the AI analysis you explicitly request.
Extension settings are stored locally and persist until you uninstall the Extension or clear Chrome's extension storage. Page content and trade data sent to our proxy are not retained after the API response is returned — no server-side logs of Extension conversations are maintained.
TROY Capital does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. We are an educational platform, not an advertising business.
This Privacy Policy is governed by the laws of the State of Florida. Any disputes shall be resolved in accordance with our Terms of Service.
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and notify users via the platform where required. Continued use of our services after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact: