1. Who we are
Huntsman is an iPhone app and a website made by JupiGlow LLC, doing business as Huntsman (“we”, “us”), 7944 Atlanta Highway, Montgomery, AL 36117, an Alabama limited liability company. Contact: privacy@gethuntsman.com.
What we are not. JupiGlow LLC is not a broker-dealer and never holds your money or securities, and it has applied to register with the SEC as an investment adviser. Your brokerage account is held by your broker, a registered broker-dealer. Your broker opens it, verifies your identity, holds your money and carries out your orders. Your broker’s own privacy notice covers what your broker holds about you.
2. The short version
- You sign in with your email address and a one-time code: Supabase runs the sign-in and Resend sends the code. We don’t ask for your Social Security number, ID documents, date of birth, home address or bank details. Your broker collects what it needs when you open your brokerage account.
- If you link a brokerage account, it goes through SnapTrade (when this is turned on) or ConnectTrade, services that connect apps to brokers, or, from launch, through your broker’s own connection where your broker offers one. You sign in on a page from them or your broker, not ours, so we never see your brokerage password.
- Our server keeps what it needs to run Huntsman for you: your agents and your practice account with its records, the agreements you accept, the link to your broker, a log of the orders you approve, the exits it keeps for you, a daily check against your broker, your price alerts and your plan (section 3).
- The AI is optional. It gets your questions and account details only after you tap Allow. They go through our server to OpenRouter, which runs AI made by OpenAI and Google (section 5). You can turn the AI off at any time. When you ask the AI to write an agent’s rules, only what you type goes to it.
- We don’t sell your personal information. There are no ads, ad trackers or third-party analytics in the app or on this website. Usage analytics are off today; if we turn them on, we will update this policy first.
- You can disconnect your broker or delete your Huntsman account at any time. Some records stay after you delete it, and section 8 says which.
3. What we collect, and why
| What | Examples | Why | Where it’s kept |
|---|---|---|---|
| Your Huntsman account | a random user ID we create, whether you finished signing up, your plan and when it ends, Apple’s transaction IDs and purchase dates, your sign-ins (stored only as scrambled codes) | To sign you in and give you your plan | Our server, until you delete your account |
| Your email sign-in | your email address; the link between your Huntsman account and your sign-in at Supabase; and each code sign-in attempt: a scrambled code for it, whether it creates an account, signs in or adds email to an account, which of your sign-ins asked for it, how many codes were tried, and when it started, ends and was used | To sign you in with a code we email you | Supabase keeps your email address and your sign-in record (section 4). Our server keeps the link until you delete your account, and each code attempt, with your email address, until it is used or expires; the next code request anyone makes then clears it. |
| Your agreements | each agreement you accept or decline at setup, its version, whether you accept or decline, on iPhone or the web, and when | To show what you agreed to, and to ask again when the words change | Our server, with no time limit, also after you delete your account. It holds your user ID, never your email address. |
| Your agents | each agent you deploy, its proposals with the reasons for them, and its practice ledger; for each agent you save, the picture you or the app chose for it and whether you, the app or the AI chose it; a photo you add for an agent, whether others can see it yet (after a safety check), and your previous photo, kept until a new one passes its check; and how many photos you added that day (a daily limit) | To run the agents you start | Our server, until you delete your account |
| Your practice account and practice agents | Your practice account and its balance, and a one-way code made from your email address so each person opens it once. Every strategy you save, and every version of its rules. Each test run of a strategy, with what went in and what came out. Each agent you start: its settings, its cash and holdings, each day’s run and why it traded, each practice trade, and each time you move practice cash in or out or sell back to cash. When you move practice cash between agents, each move. Each event of an agent (a trade, a limit reached, a pause), whether its alerts are on, whether each alert was sent to you, and whether it is closed. Each one has the time it happened. | To run your practice agents, and to keep a true record of what each saved version did | Our server, with no time limit, also after you delete your account. They hold your user ID and that one-way code, never your email address. |
| Your SnapTrade connection | a random ID we make for you at SnapTrade and its secret key, the state of your connection, whether SnapTrade has accepted a deletion, each connection you start until it is confirmed or expires, and the broker connections you ask to end and how far that got. Your brokers, account names and the last 4 digits of each account number are read from SnapTrade when you look, and not stored. | To show the accounts you link | Our server, with the secret key encrypted. Delete account asks SnapTrade to delete your user there, then erases the secret key and your pending connections and requests, and keeps the random ID, marked deleted. |
| Your direct broker connection | which broker, the access keys your broker gives us (encrypted), the state of your connection, the list of actions your broker offers, and each sign-in you start with a one-time code for that sign-in (encrypted) until it is used or expires. Your accounts and holdings are read from your broker when you look, and not stored. | To show and act on the broker account you connect | Our server, with the keys encrypted. Disconnect or Delete account asks your broker to cancel the keys where it offers that, then deletes them and your sign-ins. |
| Where agent alerts go | for each phone or browser you choose: whether it is a phone or a browser, a scrambled code for the phone or browser, and which agent events reach it | To send agent alerts only where you asked | Our server, until you remove it or delete your account |
| Your brokerage link | a random ID we make for you at ConnectTrade and its secret key, ConnectTrade’s IDs for the link, which broker, the last 4 digits of your account number, a code made from your account number so we know the account if you connect again (it isn’t encrypted), whether it’s a practice account, and the link’s state: when it was made, whether it can trade and whether it’s working. From launch, a link through your broker’s own connection keeps instead: the access key your broker gives us, your broker’s ID for each account, its last 4 digits, status and options level, whether it’s a practice account, the access you approved, and the link’s state | To show your account and send the orders you confirm | Our server, with the secret key encrypted, until you delete your account. Disconnect ends the link at ConnectTrade but keeps this record, so connecting again returns you to the same Huntsman account. Through your broker’s own connection, the access key is encrypted, and Disconnect deletes it but keeps the rest of this record, for the same reason. |
| Account data we show you | balance, buying power, options level, positions, orders, fills, activity, balance history | To show you your account, and to check each order before it’s sent | Read from your broker when needed, through ConnectTrade if you link through it. Our server holds the latest copy in memory, not on disk, apart from the records below. Your phone holds it while the app is open. |
| Your order log | each order you send: the symbol, buy or sell, quantity, order type and price, order IDs, the broker account it went to, when it was sent, your broker’s answer and what happened to the order, and, at some brokers, how many of it you held just before it was sent | To send each order once, never twice, and to find out what happened when an answer is lost | Our server, until you delete your account |
| Exits our server keeps | the exit that rests at your broker (the stop-loss, or a take-profit set without one), where your broker takes only day orders: the symbol, quantity, price and each day’s order | To place it again each trading day until it fills or you cancel it | Our server, until you delete your account |
| Daily check against your broker | after each trading day, what differs between your broker and our records, or why we couldn’t compare them, with your user ID: the symbol, order IDs, the quantity in our records and the quantity your broker holds, and orders open at your broker that you placed outside Huntsman (buy or sell and how many) | To catch a mistake in the orders we sent or the exits we keep | Our server, with no time limit, also after you delete your account |
| Exit settings | the take-profit and stop-loss levels you set on a position | To carry them out | Your phone. Where your broker accepts it, one exit also rests at your broker as an order: the stop-loss if you set one, otherwise the take-profit. Or our server keeps it (the row above). When you set both, the app watches the take-profit while it’s open. |
| Price alerts | the stock, fund or coin, above or below, the price, and when it fired | To alert you | Our server, until you remove the alert or delete your account |
| Notifications | your phone’s notification token and the sign-in that registered it, if you allow notifications; each alert we sent you, its words and whether Apple delivered it; the IDs of your open orders, to spot fills | To send the alerts you choose, each one once | Our server. The token until you turn notifications off, sign out or delete your account; each alert sent for 14 days; the IDs of your open orders: while notifications are on and your broker is linked, each one until its order ends; otherwise the last ones seen, until you delete your account. |
| AI desk items | when an event touches a ticker you hold: the item, which of your tickers it names, how much of each you hold, a dollar estimate for your position, and whether you dismissed it | To show what the event means for your positions | Our server, for 30 days |
| Your tickers | the tickers you add to your list for the AI desk, in the order you added them, and when you added each | To watch them for you | Our server, until you remove them or delete your account |
| AI questions and answers | what you ask, and the account details sent with it (section 5) | To answer you | Not stored on our server. They pass through it to the AI. Your phone keeps your last 30 AI answers and the questions they answered, so your chats are there when you come back, and any answer you report. |
| AI usage | how many questions you asked and what they cost us, for the last day you used the AI | To apply your plan’s daily allowance | Our server: only the last day you used the AI, replaced the next day you use it |
| Your credits | each change to your credits: the credits your plan gives you each month, each AI answer or agent build that used credits and which agent it was for, credits given back when the AI couldn’t answer, and the credits you buy, with Apple’s transaction ID for each purchase | To show and apply your credits | Our server, until you delete your account |
| Server logs | for each request: the feature asked for (it can name a ticker), the result, how long it took, your user ID and the time. For what the server does for you, also: the symbol, buy or sell, the quantity and the order type of your orders, order IDs, why an order was refused (it can name your options level and how much you hold), the ticker of a price alert that fired, which broker you link and whether it’s a practice account, your plan, and errors. Never what you type to the AI, your IP address, keys or passwords. | Security and fixing problems | Our server’s system log (section 7) |
| Security records | when you connect or reconnect your broker, sign out or delete your account; when a new sign-in signs out your other phones; and when your sign-in is renewed after a lost answer or an old sign-in is used again. From launch, through your broker’s own connection, also when you end the link or switch between practice and live, when your broker refuses your access key, when a link started on another phone is refused, and when your access key is encrypted again. Each holds your user ID and the time, and can hold which broker, whether it’s a practice account, how many phones were signed out and how many orders were cancelled or kept. Never a key or an account number. | Security | Our server, with no time limit, also after you delete your account |
| Support emails | your email address and what you write to us | To help you | Our support mailbox, until you ask us to delete them |
Only on your phone: your answers to the sign-up questions (including the tickers you pick) and how far you got, with the last 4 digits of the account you connected, whether it’s a practice account and a code made from your user ID that says whose sign-up it is; your record of the documents you’ve read and of your AI choice, your last 30 AI answers and the questions they answered, and any AI answer you report. Our server keeps none of them.
Face ID: the app can lock with Face ID. Apple’s system checks your face on your phone. We never receive biometric data.
What we don’t collect: your Social Security number, ID documents, date of birth, home address, bank details, contacts, photos, location or health data.
4. Who receives it
| Who | What | Why |
|---|---|---|
| Your broker | the orders you confirm, and our requests to read your account | It holds your account and carries out your orders |
| Supabase | your email address, and when you sign in | It runs our email sign-in |
| Resend | your email address and the sign-in code we send you | It delivers our sign-in emails, from mail.gethuntsman.com |
| SnapTrade | if you link through it, the random ID we made for you and what passes between us and your broker (today, reading your accounts) | It connects Huntsman to your broker |
| ConnectTrade | if you link through it, everything that passes between us and your broker: your orders, your account data, and the random ID we made for you | It connects Huntsman to your broker |
| OpenRouter, and OpenAI, Google, Microsoft or Amazon | your AI questions and the account details in section 5. Only after you tap Allow. | To answer you |
| Alpaca | our server’s requests for prices, which name stocks and funds, never anything about you | Our market data company, for the prices agents use |
| finlight | the ticker names the AI chat looks up news for (they can be names you hold) and the time window, never your user ID or anything else about you | News search for the AI chat’s research step |
| Apple | your purchases and plan status; each notification’s words and your phone’s token; what you dictate to the AI, when your iPhone can’t turn speech into text on the phone | To run purchases, notifications and dictation |
| Amazon Web Services | everything our server keeps (section 3) | Our server and our database run on Amazon Web Services (Lightsail), in the eastern United States. If we move them to another host, we’ll update this page first. |
| Porkbun and Google | the emails you send us | Our domain’s email service (Porkbun) forwards our support and privacy addresses to a Google mailbox |
| Legal and safety | what’s needed | To comply with the law, legal process or regulators, or to protect users and Huntsman |
| A buyer or successor | what’s needed | If JupiGlow LLC is merged, sold or renamed, this policy keeps applying to your data |
We don’t sell your personal information, and we don’t share it for cross-context behavioral advertising.
5. The AI
- Nothing about you goes to the AI until you tap Allow on “Turn on Ranger?”.
- After that, each question sends your questions and the last 8 turns of the chat, your positions (what you hold, what you paid, their price, gain or loss), your balances (buying power, today’s gain or loss, account value), and your orders (the one on screen and the trades you opened today). Market data on the screen goes with it.
- It goes from your phone to our server, then to OpenRouter (OpenRouter, Inc.), which runs it on AI made by OpenAI and Google, at OpenAI, Google, Microsoft (Azure) or Amazon (Bedrock). OpenRouter and these companies may handle a request outside the United States (for example, Microsoft in the EU).
- We tell OpenRouter to use only providers that, in OpenRouter’s words, “do not collect user data”, and we send a scrambled ID instead of your user ID. Some of these companies may still keep a request for a while under their own rules. OpenRouter says it doesn’t train models on what you send. How long it keeps requests is set by its privacy policy.
- Writing an agent’s rules. When you ask the AI to write or change an agent’s rules, what you type and your answers to its questions go from our server to OpenRouter, for AI made by OpenAI. None of your account details go with them. This happens only when you use the agent builder.
- Our server doesn’t store your questions or the AI’s answers.
- The AI desk’s own AI reads market sources, like company SEC filings and the Fed, and no data about you. What an item means for your positions is worked out on our server.
- The AI is optional: you can use Huntsman without turning it on, and your answer is recorded as an agreement with a version and a time. Text the AI writes is information, not investment advice.
- Turn the AI off in Settings › Huntsman AI. Nothing more goes to the AI.
6. Analytics and advertising
- In the app: no advertising tools, no tracking pixels and no third-party analytics. We don’t track you across other companies’ apps or websites, so the app shows no tracking (ATT) prompt.
- Apple’s App Analytics: if you agree in your iPhone’s settings, Apple shares anonymous, combined usage numbers with us.
- This website: no ads, analytics, cookies or third-party scripts, and our web server keeps no visitor log.
- Huntsman on the web: one sign-in cookie, which keeps you signed in for up to 12 hours. No ads, analytics or tracking cookies.
7. How long we keep it
- Your Huntsman account, agents, brokerage link, order log, server-kept exits and price alerts: until you delete your account (or remove the alert).
- Your email sign-in: the link until you delete your account; each code attempt until it is used or expires, cleared at the next code request. Supabase keeps your email address until we delete it there (section 8).
- Your SnapTrade connection: until you delete your account; then only the random ID stays, marked deleted.
- Your direct broker connection: until you disconnect or delete your account.
- Where agent alerts go: until you remove it or delete your account.
- Your practice account and practice agents, and your agreements: kept with no time limit, also after you delete your account, as the record of what each agent did and what you agreed to. They hold no name or email address.
- AI desk items: 30 days.
- Alerts we sent: 14 days.
- AI usage: only the last day you used the AI, replaced the next day you use it.
- Server logs: the log holds at most 500 MB, and the oldest lines are dropped first.
- Security records: kept with no time limit, also after you delete your account. They hold no name, email, key or account number.
- Daily broker checks: kept with no time limit, also after you delete your account.
- Support emails: until you ask us to delete them.
- AI questions and answers: not kept on our server.
- Backups: copies of our server are deleted within 30 days, so what you delete is gone from them within 30 days.
- After registration: once JupiGlow LLC registers as an investment adviser, the law will require us to keep records about advisory accounts, trades and our messages with you for at least five years, even after you close your account. We’ll update this policy before that applies to you.
8. Your choices
- Turn the AI off: Settings › Huntsman AI. This withdraws your consent, and nothing more goes to the AI.
- Disconnect your broker: Settings. Your connection at ConnectTrade, or the access key from your broker’s own connection, is deleted, so we can no longer reach your account.
- Delete your Huntsman account: Settings on the iPhone, Account on the web, or by email (gethuntsman.com/delete). We stop your agents, then delete, right away, your account, your agents, your brokerage link and your user at ConnectTrade, your SnapTrade user (we ask SnapTrade to delete it, then erase its secret key), your order log, the exits we keep, your price alerts, notification tokens and where agent alerts go, AI desk items, your tickers, AI usage and the link to your email sign-in. Security records and daily broker checks stay. Your practice account, practice agents and agreement records stay too, with your user ID and no email address. Your email address at Supabase isn’t removed by Delete account yet: email privacy@gethuntsman.com and we delete it there. Backups follow within 30 days. This doesn’t close your brokerage account. Your broker holds it, and you close it with your broker.
- Notifications: turn them off in your iPhone’s settings, and we delete your token. The app works without them.
- Access, correction, deletion and other privacy rights: email privacy@gethuntsman.com (section 9).
9. Your state privacy rights
- Depending on where you live (for example California, Colorado, Connecticut, Virginia or Utah), you may have the right to know what personal information we collect, use and share, and to get a copy of it; to correct it; to delete it; and to opt out of its sale, of its sharing for targeted advertising, and of profiling that has legal or similar effects on you.
- We don’t sell personal information, we don’t share it for targeted advertising, and we don’t use it for profiling of that kind.
- We honor these rights for every user, wherever you live. Email privacy@gethuntsman.com from the email address you sign in with. We may ask you to confirm it’s you, and we answer within 45 days. Someone you authorize in writing can ask for you.
- We won’t discriminate against you for using these rights.
- Some records stay where the law requires or allows it, as section 7 says.
10. Security
- Data moves over encrypted connections (HTTPS).
- Your brokerage link’s secret key is encrypted with a key kept apart from our database.
- Your sign-ins are stored only as scrambled codes, and the app holds no brokerage or AI keys.
- Access to our servers is limited to the people who run Huntsman.
- No system is perfectly secure. If a breach affects you, we’ll tell you as the law requires.
11. Age
Huntsman is for adults 18 and older. Brokerage account rules also require it. We don’t knowingly collect data from anyone under 18.
12. Where we operate
Huntsman is offered in the United States, and our server and database are in the United States. The AI companies may handle AI requests outside the United States (section 5).
13. Changes
If we change this policy in a way that matters, we’ll tell you in the app before it takes effect, and ask you to agree again.
14. Contact
JupiGlow LLC, 7944 Atlanta Highway, Montgomery, AL 36117 · privacy@gethuntsman.com