Legal
Privacy Policy
Effective date October 19, 2026.
Who we are
Zero1 is a service of Nostradamus Solutions LLC. This policy describes the information we collect when you use it, on the website and in the phone app.
Your account
You can create an account with an email address and a password, or with Google.
We store your email address, a name if one is provided, a username if you set one, and a profile image if you upload one. We store a hash of your password. We do not store the password.
Signing in sets a session cookie. We store a hash of the session token, not the token.
If you choose Google, Google sends us your email address, whether that email is verified, your name, and Google's identifier for the account. We store that identifier. We do not store a Google access token or refresh token.
A referral code, if you arrived with one, is held in a cookie until the account is created, then stored with the account. Your choice of light or dark appearance stays in this browser.
If you publish a profile or a strategy, what you publish is visible to other people. Your email address is not.
Billing
Plans on the website are billed by Stripe. Stripe hosts the payment page. We do not receive or store your card number.
When Stripe first creates a billing customer for the account, we send Stripe the email address. We store Stripe's customer identifier, the subscription identifier, the plan, the status, and when the period ends.
Plans bought in the Apple app are billed by Apple. We store Apple's transaction identifier and the plan status. We do not receive your payment details from Apple.
We send account email through Resend. That covers address verification, password reset, a welcome message, and alerts you turn on. Each message goes to the email address on the account.
If you reply to cesar@zero1.bot, Resend receives the reply. We store the sender's address, the subject, and the message. When that address matches an account, we also keep the message as feedback on the account.
Mail to careers@zero1.bot is stored the same way. We also send a copy to the address that reads applications.
Your exchange
You can connect your own exchange account with an API key or with the exchange's own sign-in. The key or token is encrypted before it is stored.
We use it to read balances and positions and to place, change, and cancel orders you have authorized. We do not ask for permission to withdraw funds.
Brokerage accounts
Blueprint connects a brokerage account through SnapTrade. We register an identifier with SnapTrade and store the secret SnapTrade returns. That secret is encrypted.
SnapTrade sends us the brokerage name, the account name, the last four digits of the account number, and buying power. Orders you authorize are sent through SnapTrade to the brokerage. We store those orders, the fills, and the copied positions.
Trading records
We keep the orders, fills, and positions for each agent you run, and the strategy and limits you set. Demo results and live results are stored separately.
Alerts and the assistant
If you turn alerts on, we store the address you choose. That can be an email, a phone push token, a browser push subscription, a Telegram chat, or a web address you give us. We use it to send the alerts you asked for.
Questions you ask the assistant are sent to DeepSeek, along with the account figures the reply is based on. We do not store the conversation.
Hosting and records of use
Zero1 runs on hosted infrastructure. The host keeps technical logs of requests, including the time, the network address, and the request.
We use the network address to limit repeated sign-in and verification attempts. We keep it for that purpose, separate from your account.
We record product events on your account, such as whether a prompt was shown and which setup step finished. Those records stay with us. They do not include a sentence you wrote. Feedback you submit in the product is stored with your account, the screen it came from, and the text.
When error reporting is on, an error report is sent with secrets removed. The report does not include the request body, cookies, or headers.
Sharing
We do not sell personal data.
The services named above receive the information described where each one is named. We do not send personal data to them for advertising.
Closing an account
You can delete your account in the product.
We replace the email address and name, end the session, and remove a profile image.
If you are the only person on the account, we destroy the stored exchange credential and stop the agents. If someone else is on the account, we remove you and leave their connection as it is.
We delete the brokerage secret we stored. SnapTrade and the brokerage keep their own records of the connection.
Orders, fills, feedback, and the product events above stay on record.
Changes
We may update this policy. The date at the top is the date of this text.
Contact
Questions about this policy can be sent to cesar@zero1.bot, or through the contact page.
Nostradamus Solutions LLC.