SABLEalpha

Privacy policy.

What SableAlpha collects, why, and how it is handled, so your data powers your decisions and no one else's.

Last updated October 8, 2026

Who is responsible.

What we collect.

  • Demo, quote, and support requests you send us, meaning name, work email, company, role, and the message itself.
  • The documents and data an organization provides or connects during an engagement, which are processed only to run the system for that organization.
  • The look-back reads an accounting export in your browser and never uploads it, and we keep only a fingerprint of the file, the run's totals, and the status of each finding, as the security page sets out.
  • Questions put to Augustine, SableAlpha's AI assistant, together with the context SableAlpha assembles to answer them, and the questions and answers we keep.
  • Metadata-only operational logs that exclude passwords, tokens, payloads, prompts, and content.
  • SableAlpha runs no third-party analytics or advertising trackers and sets one functional cookie.

Who processes it, and where data lives.

  • Supabase

    Supabase hosts the database and file storage on Amazon Web Services in Ohio, United States (us-east-2), encrypted at rest with AES-256 and in transit with TLS.

  • Vercel

    Vercel hosts the application on its United States infrastructure and serves the public pages through its content network.

  • Resend

    Resend sends transactional email such as request confirmations, founder notifications and QuickBooks alerts.

  • Google Workspace

    Google Workspace hosts the company mailboxes where email to sablealpha.com addresses is delivered and read.

  • Cal.com

    Cal.com schedules calls and receives the name, email, and answers a booker provides.

  • Stripe

    Stripe processes any card payment, and SableAlpha never sees or stores card numbers.

  • Your organization's data is stored in the United States.
  • AI requests that carry your organization's data go from our servers only to a model that keeps none of it, and are refused when none is available.
  • Questions to Augustine's document engine, which answers from your data room, are not yet held to that rule.
  • Other AI requests, such as those about public market data, may go through a third-party AI routing service to the model chosen for the task, and SableAlpha never trains models on your data.
  • External data providers receive query terms only, never your organization's data.
  • A current subprocessor list, including our AI infrastructure provider, is available from privacy@sablealpha.com.

How long we keep it.

  • Requests you send us are kept for as long as needed to respond and to run the engagement they lead to, and export or deletion of anything SableAlpha holds for you can be requested from the support page.
  • Some records are kept longer to meet legal, tax, or accounting obligations, and deletion from backups is not immediate.

Your rights.

  • Depending on your jurisdiction you may have rights of access, correction, deletion, and export, and you can exercise them by writing to privacy@sablealpha.com.
  • Data is encrypted in transit and at rest.

Questions about this document go to hello@sablealpha.com, and the other policies are linked in the footer.