Privacy Policy

Effective Date: May 19, 2026 Last Updated: June 1, 2026 Entity: Blues Prince Media LLC ("Company," "we," "us," or "our") Platform: Watchtower by Sovereign Finance OS ("Platform")

1. Introduction

Blues Prince Media LLC operates the Watchtower platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. We are committed to protecting your personal data and your right to privacy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:
  • Full name
  • Email address
  • Phone number (optional)

    • 2.2 Bank and Financial Account Data (via Plaid)

    When you connect a bank or financial account using Plaid, we receive:
  • Account metadata — institution name, account name, account type, and last-four digits of the account number.
  • Transaction history — date, amount, merchant name, and category for transactions in connected accounts.
  • Account balances — current and available balance.
  • Routing and account identifiers — used solely to verify account ownership, never stored in plaintext.

    • This data is retrieved through Plaid Technologies, Inc. ([plaid.com](https://plaid.com)), a licensed financial data aggregator. By connecting your financial accounts, you authorize Blues Prince Media LLC to access this data via Plaid on your behalf.

    We do NOT:

  • Store your bank username or password.
  • Share your financial account data with advertisers or data brokers.
  • Use your financial data to make credit decisions or sell financial products.
  • Sell your personal financial data to third parties.

    • 2.3 Brokerage Integration Data

    When you connect a third-party brokerage account (e.g., Alpaca), we receive:
  • An OAuth access token — a revocable credential that allows us to interact with your brokerage account on your behalf.
  • Account metadata — such as account ID, account status, and account type.
  • Portfolio data — positions, order history, and account balances retrieved during active sessions.

    • We do NOT collect or store:

  • Your brokerage username or password.
  • Your Social Security Number, bank account numbers, or routing numbers.
  • Any personally identifiable financial documents.

    • 2.3 Usage Data

    We automatically collect:
  • Log data (IP address, browser type, pages visited, timestamps).
  • Device information (operating system, device type).
  • Analytics data to improve Platform performance.

    • 3. How We Use Your Information

    We use the information we collect to:

  • Provide, maintain, and improve the Platform.
  • Execute paper trading operations on your behalf via connected brokerage accounts.
  • Generate market intelligence, trend signals, and analytical reports.
  • Communicate with you about your account, updates, and security alerts.
  • Comply with legal obligations.

    • We do NOT:

  • Sell your personal data to third parties.
  • Use your brokerage data for proprietary trading.
  • Share your portfolio or trading data with other users.

    • 4. How We Protect Your Information

    4.1 Encryption at Rest

    All sensitive credentials (API keys, OAuth tokens) are encrypted using AES-256-GCM (Advanced Encryption Standard, 256-bit key, Galois/Counter Mode) before storage. This is an industry-standard encryption method used across enterprise security applications.

    4.2 Encryption in Transit

    All data transmitted between your browser and our servers is encrypted using TLS 1.3 (Transport Layer Security). All API communications with third-party brokerage services use HTTPS.

    4.3 Key Management

    Encryption master keys are stored exclusively in environment variables on our hosting infrastructure, separated from the database. A breach of the database alone cannot decrypt stored credentials.

    4.4 Access Controls

    Access to production systems is restricted to authorized personnel only, enforced via multi-factor authentication and role-based access controls.

    5. Data Retention

  • Account data is retained for the duration of your account plus 30 days after deletion.
  • Bank transaction data received from Plaid is retained for up to 7 years for personal financial recordkeeping in compliance with IRS recordkeeping guidelines. You may request deletion at any time.
  • Plaid access tokens are stored only while your bank connection is active. You may disconnect at any time from the Settings page, which immediately revokes and deletes the stored token.
  • Brokerage tokens are stored only while your brokerage connection is active. You may disconnect at any time, which immediately deletes the stored token.
  • Usage logs are retained for up to 12 months for security and analytics purposes.

    • 6. Data Sharing and Disclosure

    We may share your information only in the following circumstances:

  • With your consent — when you explicitly authorize a third-party integration.
  • With service providers — hosting, database, and infrastructure providers who process data on our behalf under strict confidentiality agreements.
  • For legal compliance — when required by law, subpoena, court order, or regulatory request.
  • To protect rights — when necessary to protect the rights, property, or safety of Blues Prince Media LLC, our users, or others.

    • 7. Third-Party Services

    The Platform integrates with third-party services including:

  • Plaid Technologies, Inc. — Bank connectivity and financial data aggregation. Plaid enables you to securely connect your bank accounts. Your use of Plaid is subject to [Plaid's Privacy Policy](https://plaid.com/legal/privacy-policy/) and [Plaid's End User Privacy Policy](https://plaid.com/legal/end-user-privacy-policy/).
  • Alpaca Markets, Inc. — Brokerage execution and market data. Subject to [Alpaca's Privacy Policy](https://alpaca.markets/privacy-policy).
  • Intuit Inc. (QuickBooks Online) — Accounting data export for tax preparation. Subject to [Intuit's Privacy Policy](https://www.intuit.com/privacy/statement/).
  • Supabase — Authentication and database services.
  • Vercel — Application hosting and deployment.

    • We encourage you to review the privacy policies of all third-party services.

    8. Your Rights

    Depending on your jurisdiction, you may have the right to:

  • Access — Request a copy of the personal data we hold about you.
  • Correction — Request correction of inaccurate personal data.
  • Deletion — Request deletion of your personal data ("Right to be Forgotten").
  • Portability — Request a machine-readable export of your data.
  • Revocation — Disconnect your bank or brokerage integration at any time from the Settings page, immediately revoking our access token and stopping further data collection.
  • Opt-out — You may opt out of non-essential data processing at any time.

    • To exercise any of these rights, contact us at privacy@bluesprincemedia.com.

    9. Children's Privacy

    The Platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it immediately.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Platform constitutes acceptance of the revised policy.

    11. Contact

    For questions about this Privacy Policy, contact:

    Blues Prince Media LLC Email: privacy@bluesprincemedia.com Web: bluesprincemedia.com