Agentic Trading 365

Data handling, privacy & cancellation

Agentic Trading 365 · By Atilas LLC
Privacy notice updated: October 8, 2026 · Pilot terms version: September 28, 2026 · Cancellation terms: September 27, 2026

This privacy notice describes Agentic Trading 365’s research service. Registration, complimentary access and paid-plan availability depend on the service settings and the terms shown when you sign up or choose a plan. For privacy requests, billing questions or assistance, contact michael@atilasllc.com. Do not email passwords, API keys or card details.

Information we handle

We store your name, handle, email, optional company, timezone, optional avatar, password hash, recovery-code hash, session records and account preferences. Optional authenticator secrets and retained broker authorization tokens are encrypted; backup and email challenge codes are hashed. We also store watchlists, simulated positions, research inputs and outputs, forecasts, decisions, usage counts, account activity and AT365 Chat posts. Cancellation feedback is optional. We do not need your brokerage password, Social Security number or bank details to provide research.

How information is used and shared

We use account data to authenticate you, personalize your workspace, provide research, measure forecast performance and research usage, support billing, respond to requests and secure the service. Account workspaces are separated. AT365 Chat posts, names and handles are visible to registered members; company and email are not published there. Avoid posting confidential information. Other members may retain copies of material you share.

AWS hosts the service and, when configured, Amazon SES delivers requested verification and recovery emails. Our AI service provider processes research context such as symbols, supplied market/news evidence, portfolio context and prior forecast feedback to generate assessments. Public data providers receive market and news queries. When payments are enabled, Stripe handles hosted payment entry and billing records; the application keeps customer/subscription identifiers and usage records, not card numbers. These providers apply their own contractual and retention requirements. Administrators can manage account access and operational records. Provider secrets are encrypted and are not retrievable through member or administrator responses.

The service does not implement advertising-data sales. This is not a promise that third-party processing has zero retention. Research and confidence estimates are uncertain and do not guarantee returns. You may link a broker for account data and preview orders. Only explicitly confirmed sandbox orders can be submitted in this build; real-money submission is disabled. Account assessment sends holdings context to our research service.

Cookies and browser storage

We use essential first-party storage to provide requested functions. Optional interface preferences are off until you select them and choose Save choices. Reject optional is equally available; ignoring or closing the notice is not consent. Use Privacy choices on any page to withdraw permission. Rejecting removes the optional values from this browser. Your current screen preferences can still work in memory, but will not be remembered after you leave. Choices apply separately to each browser and site origin (staging and production are separate).

We do not load third-party advertising or analytics trackers. With your optional consent, first-party Economic Outlook analytics records page views, a random browser identifier that rotates each UTC day, the referring domain, approximate country, browser family, active viewing seconds and click counts by action category. Country is estimated locally from the connection IP using DB-IP Lite; VPNs and network routing can make it inaccurate. Active viewing time excludes hidden, unfocused and idle periods and is an estimate, not proof that the report was read. Click tracking does not collect typed text, link URLs, page contents or individual click trails. Historical visits cannot be enriched retroactively. No IP address, account identity, full referral URL or user agent is stored with these measurements. Measurement records older than 90 days are removed on the next measurement or administrator report request. The daily browser identifier is replaced on your next consented visit after the UTC date changes; rejecting analytics removes it. Aggregated reports are available only to administrators. Counts exclude visitors who decline and are estimates, not an exact count of people. Withdraw consent in Privacy choices; Global Privacy Control and Do Not Track suppress measurement. Global Privacy Control and Do Not Track do not enable optional storage; there is no sale/share-for-advertising flow in this build. This does not mean we do not use service providers. Links and hosted payment or broker pages have their own privacy practices. We will review and disclose new purposes before introducing them.

Security and account choices

HTTPS protects hosted connections; passwords and recovery codes are hashed. No system can guarantee complete security. Edit details in Profile, set session duration in Settings, and manage chat alerts in AT365 Chat. Where email delivery is configured, verify your email in Profile to enable email recovery. Optional authenticator sign-in adds a second factor; retain your one-use backup codes and account recovery code securely. Email recovery does not remove an enabled authenticator. Do not send passwords, recovery codes or API secrets to support.

Legal bases, international processing and your rights

Atilas LLC is responsible for the account service described here. We process account and requested research information to provide the service, security records to protect users and the service, and billing or legal records where required by applicable law. Where consent is required for an optional purpose, we seek a separate choice. Accepting pilot terms is not blanket consent to all processing and does not waive statutory rights.

The current AWS deployment is in the United States. Service providers may process data in other countries. International availability is planned, but region-specific eligibility, provider contracts, transfer safeguards and required representatives remain under review; this privacy notice does not assert that worldwide onboarding has been legally cleared. Contact us before joining from a jurisdiction requiring additional protections. We do not use your terms checkbox as consent to an international transfer.

Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction, or object to processing; you may withdraw optional consent without affecting prior lawful processing and complain to your local data protection regulator. Contact michael@atilasllc.com. State the request and your account handle; we may need proportionate identity verification before disclosure or deletion. There is no automated full-data export yet. We do not require you to waive rights or purchase a service to request assistance. The in-app 30-day deletion schedule does not replace applicable statutory request deadlines or exceptions.

The service is for adults aged 18 or older and is not intended for children. Account acceptance records contain the policy version and acceptance time. Server-side account activity is distinct from optional browser storage and is used for the activity history and security; rejecting browser preferences does not delete that history.

Pilot terms and research risk disclosure

By affirmatively accepting these terms, you agree to use the Atilas LLC research pilot for lawful purposes, protect your credentials, access only accounts you are authorized to use, and avoid abusive or misleading community posts. You confirm you are at least 18. You may stop using the service and request cancellation or deletion under the policy below. Existing legal consumer rights are not excluded.

AT Sentinel uses AI-generated analysis, market data and news to present research and proposals. Sources may be delayed, incomplete or incorrect. Confidence estimates are model assessments, not guaranteed probabilities; hypothetical or historical performance does not establish future returns. Losses can exceed expectations and stop or loss-limit settings do not guarantee protection against market gaps or execution failures. Independently check the evidence, account, price and order details. Consider professional advice appropriate to your circumstances.

Recording Buy, Sell, Hold or Watch is not itself a broker fill. Research does not authorize a trade. Broker authorization and any order confirmation are separate actions. Real-money order submission is disabled in this pilot; sandbox outcomes are simulated. No promise of profit, loss avoidance or proven predictive advantage is made. This notice does not determine the service's regulatory classification or substitute for required financial authorization.

The pilot may be interrupted or changed, and your session may expire. Availability and broker access depend on your region and provider eligibility. Any paid plan must show its price, renewal and cancellation terms before checkout, with a separate affirmative purchase action. Accepting these terms does not enroll you in a paid subscription or marketing.

Retention and deletion scope

Account/workspace data and versioned terms receipts are retained while the account exists. Terms receipts are removed with account deletion. Activity history is limited to the latest 90 days and 5,000 entries per account, pruned on subsequent activity. Research reliability measurements are limited to 90 days and pruned when subsequent measurements are recorded. Email challenge codes expire after 15 minutes; pending authenticator enrollment expires after five minutes. Expired challenges cannot authorize access. Broker authorization is time-limited and requires reconnection when expired. Cancellation alone does not delete saved data. Optional feedback is retained with the account until deletion. Deletion removes the account profile, authentication records, avatar, personal workspace and locally stored brokerage authorization material, user-linked activity and research-usage records, local billing links and feedback, and the user's authored AT365 Chat posts from the live application. Other members' replies are preserved as independent posts. A minimal deletion receipt contains a random request identifier, request/completion dates and policy version, without the deleted profile or feedback.

Application deletion does not erase invoices or records held independently by Stripe or other providers. Restricted server security logs rotate under hosting settings. Existing backups or legacy copies are outside the live-database erasure job and require administrator review and deletion or expiry; we do not promise that every backup is erased on day 30. Backups must not be restored without reapplying deletion records. Records specifically required for legal obligations, fraud prevention or dispute handling may need restricted retention. Contact us to discuss a particular retention or deletion request.

Account and subscription cancellation

In Profile, choose Cancel account, optionally provide feedback, enter your current password, and acknowledge this policy. We check for an active AT365 subscription, close pending checkouts and request cancellation at the current billing-cycle end. We display the verified date only after the payment provider confirms. You retain applicable paid access until that date. Existing amounts already due may still be payable. If no paid subscription exists, a trial or complimentary plan ends at its recorded end date; an account without an active cycle is canceled immediately.

After the cancellation date, new research and automatic research stop. You may still sign in to view saved information and request deletion. Cancellation does not itself delete the profile or history and does not close an E*TRADE, Robinhood or other external brokerage account. Contact support if you wish to reactivate. If a provider is unavailable, the application reports an error rather than claiming cancellation succeeded.

Permanent account deletion: 30 days

Choose Delete account in Profile to schedule deletion 30 days (30 × 24 hours) after your request. We also cancel any active AT365 subscription at its billing-cycle end and display both dates. If your billing cycle extends beyond the deletion date, deletion still ends account access on day 30; remaining access is relinquished. No automatic prorated refund is issued by this workflow. This does not limit any refund or other rights required by applicable law; contact support about refunds or disputes.

Before the deadline, you can withdraw deletion from Profile using your current password. Withdrawal does not resume a subscription or reverse account cancellation. Repeated requests do not extend an existing deletion deadline. At the deadline, sign-in is blocked and the server's retention worker removes live application data. The worker checks at least once per minute while the service runs; outages or provider/filesystem failures can delay completion, but access stays blocked and deletion is retried. Deletion cannot be undone after completion. Administrators must ensure another active administrator exists before canceling or deleting their own administrative account.

Policy updates and assistance

The confirmation records the policy version acknowledged with the request. Updated terms require a new acknowledgment before new research, broker connections, sandbox submissions or checkout. Privacy choices remain separate. Material privacy changes will be described in the notice before use of data for a new purpose; where required, a separate new consent is needed. Provider-retention procedures and region-specific requirements require ongoing review; availability of the site does not establish eligibility in every jurisdiction. Questions or feedback: michael@atilasllc.com.

Manage your account

Complimentary access and abuse prevention

Complimentary access is limited across related accounts and requires email verification. We use keyed email identifiers (including known Gmail aliases), keyed network identifiers, trial attempts and research usage to detect repeat trials. Network patterns may require human review; shared networks are not permanently banned solely for sharing an address.

Keyed email eligibility records are retained for 365 days after trial activation or deployment of these controls for existing trials, including after account deletion. Trial attempt records are retained for 30 days; account links are removed on deletion. Administrator exceptions expire after 7 days. Keyed identifiers remain personal data, not anonymous records. No raw IP address is stored in this trial-protection record. Contact michael@atilasllc.com to request review or exercise applicable privacy rights.