1. Who operates the service
Lucas Callado, based in Boston, Massachusetts, United States, operates Brotherhood Capital. This notice covers brotherhood.capital, status.brotherhood.capital, the waiting list, and the authorized-access trading platform. Contact calladolucas@gmail.com with privacy questions or requests.
The public website introduces the proprietary AZAS framework and AI-assisted trading platform. The status website reports service availability. Private features require authorized access. This notice describes information practices; it does not grant platform access, authorize trading, or guarantee service availability or investment results.
2. Your place. Your privacy.
We store your email address, signup timestamp and which waiting-list form you used. We use this information to manage early-access interest and share availability and product updates.
To limit abuse, the service temporarily stores a keyed, non-reversible hash of the request’s IP address with request counts. Raw IP addresses are not stored in the waiting-list database.
Waiting-list records are private. Registration does not create a trading account, connect a brokerage account or authorize trades.
Abuse-prevention hashes are pseudonymous information, not a promise of anonymity. Hosting, network and security providers may separately process or retain IP addresses and request metadata to deliver and protect the service. You can request removal from the waiting list by contacting us from the signup address.
3. Information used by the private platform
Depending on the features you use or configure, the platform processes account email and profile information, sign-in and session records, preferences, and connected-brokerage information. Brokerage information can include account identifiers, balances, positions, orders, fills, trading decisions, risk settings, performance and outcome reviews, and integration credentials needed to access a configured provider.
The platform also records conversations, requests, tool results, saved insights, and decision and learning evidence. These records support requested functionality, operational review, security, reconciliation and controlled evaluation of the framework. Do not put passwords, full financial account numbers, Social Security numbers, or unnecessary sensitive information in chat or ordinary support emails.
The main administrator manages waiting-list access grants and revocations. We retain signup identifiers, the linked account identifier, access state, revision and administrator-action timestamps, and invitation-request outcomes for security and access administration. An email accepted by our authentication service does not by itself confirm delivery or establish permission to use a disabled account.
Approved viewers receive shared market research and their own private AI conversations. Brokerage accounts, balances, positions, trade history, administrative conversations and trading controls remain restricted to the main administrator. Viewer messages are not shared with other viewers; authorized operational access remains possible to provide support, investigate misuse or meet legal obligations.
Trading authorization and brokerage permissions are separate from this notice and the waiting list. Account-level service and security messages may be necessary even if you opt out of promotional updates.
4. AI, learning and optional voice features
AI features may send conversation text, relevant market and portfolio context, and tool results to the configured AI service, including OpenAI, to produce a response or analysis. Stored decisions, outcomes and feedback also support the platform’s controlled learning and review processes. This is not a promise of improved returns or a statement that every record is used to train a general-purpose model.
For viewer research chat, only that viewer’s recent conversation and a limited projection of shared market research are supplied to the AI provider. This chat has no brokerage or trading tools and cannot change access, settings or the watchlist.
If you activate voice features and permit microphone access, audio and text may be processed by voice providers such as ElevenLabs and by your browser’s speech-recognition service. Transcripts and resulting messages may become part of conversation history. Provider processing and retention follow the applicable service configuration and provider terms. You can stop voice use or revoke microphone permission in your browser.
5. Availability, resilience and status monitoring
The status service performs scheduled, read-only checks of public page delivery, application readiness, authentication service health, data-access readiness and expected background processing. It also reads public provider status feeds. Checks do not place trades, submit waiting-list registrations, sign into customer accounts, or purchase AI output.
Monitoring records consist of component names, check times, availability results, response durations, aggregate daily measurements and incident opening or recovery times. Public status information is limited to these operational summaries and generic incident descriptions. Customer identities, email addresses, portfolio values, symbols, order details, integration keys, raw diagnostic messages and proprietary trading logic are not part of the published monitoring payload.
Raw monitoring samples have a retention target of 48 hours. Daily aggregates, aggregate monitoring-correction records and resolved incident history have a retention target of 90 days. Successful scheduled runs remove older records; an interruption can delay cleanup, and an unresolved incident can remain until resolved. The monitoring store is separate from the trading database. These records measure sampled availability, not every transaction. Missing observations are not counted as successful checks, and stale monitoring is identified as unavailable or unknown.
The status page is public and has no account-registration or marketing-subscription requirement. Its own hosting and security providers still process ordinary connection metadata. Provider advisories are labeled separately from direct platform checks. A public status update does not replace any individual or regulatory notification required by law.
6. Browser storage and technical information
Essential browser storage supports sign-in sessions, theme and layout preferences, and authorized features. The status page stores only its theme preference in your browser. It does not add advertising cookies or a visitor-level analytics identifier. Blocking essential storage may affect sign-in or saved preferences.
Cloudflare, Supabase and other necessary providers process technical information such as IP addresses, browser or device information, request times, routes, response codes and security events. The main website currently loads Google Fonts, which involves requests to Google’s font services. The status page uses system fonts and first-party assets. Do Not Track signals do not disable necessary security or service operations.
7. Why information is used and shared
We use information to provide the services you request, manage early-access interest, authenticate authorized users, operate configured trading features, evaluate decisions and outcomes, prevent abuse, diagnose incidents, improve reliability, respond to requests, and meet applicable legal obligations.
Necessary providers include Cloudflare for hosting, delivery, security and the status store; Supabase for authentication, application data, server functions and private archives; Alpaca and Financial Modeling Prep for configured brokerage or market-data services; and configured AI, voice and font providers. Information relevant to a feature may be processed by that provider under its applicable terms and privacy notice. Supabase Authentication and Resend process recipient email addresses, invitation or sign-in content, delivery events and technical metadata to send requested account-access emails. These operational emails are separate from promotional subscriptions. Email correspondence is processed through the contact mailbox provider. Providers’ own account and service notices may also apply.
We do not sell personal information, share it for cross-context behavioral advertising, or operate targeted advertising on these services. Information may be disclosed when reasonably necessary to comply with law, respond to lawful process, protect rights and security, investigate misuse, or complete a business transfer subject to appropriate protections and applicable notice requirements. Public status reports remain subject to the limits described above.
8. Retention and private archives
Retention depends on the purpose, the sensitivity of the record, operational needs and applicable legal obligations. Waiting-list information supports early-access administration and product updates until removal is requested or that purpose ends. Contact us to request removal or to stop promotional updates; any commercial email must provide an appropriate opt-out route.
Viewer chat has a retention target of 30 days, with at most the latest 200 messages per viewer retained during normal chat completion. Scheduled cleanup removes older requests and associated messages in bounded batches; interruptions can delay cleanup. Access revocation blocks subsequent reads but does not immediately erase stored records. Access-change and invitation audit records are retained for security and account administration while needed for those purposes. Authentication, email-provider logs and backups follow their applicable settings and retention processes.
Eligible operational events and superseded analyses older than 45 days may move into verified, compressed private archives. Archiving retains information; it is not deletion. Recent records, the newest relevant analyses, trade-linked analyses, risk evidence, learning records and other necessary business or security records can be kept longer. Provider logs, recovery copies and backups have their own applicable retention and deletion processes.
A deletion request is evaluated across relevant active data and retained copies. Where information must be preserved for security, legal duties, disputes or other lawful exceptions, we explain the applicable limitation. Information retained only in recovery copies is protected and addressed through the relevant recovery or expiry process rather than treated as available for unrelated use.
9. Safeguards and incident response
Technical measures include encrypted transport, authenticated access, restricted server roles, private archive access, constrained monitoring credentials, bounded requests, and integrity checks before eligible records leave the active database. Monitoring credentials do not authorize trading or account access. No internet service can promise absolute security or uninterrupted availability.
We investigate suspected security incidents and assess required notifications under applicable U.S. federal and state law. Where Massachusetts law applies, this includes evaluating obligations under M.G.L. Chapter 93H, applicable disposal requirements under Chapter 93I, and the safeguards required by 201 CMR 17.00 for covered Massachusetts personal information. Required notices to affected individuals or authorities are handled through the legally required channels; aggregate status notices are not a substitute.
10. Privacy requests and choices
Email calladolucas@gmail.com with the subject “Privacy request.” You may ask about information associated with you, request correction or deletion, ask for a copy where applicable, or withdraw waiting-list interest. Depending on your residence and the law that applies, additional rights can include an authorized-agent request, an appeal, or an opt-out of covered sale, sharing, targeted advertising or certain profiling. The availability and scope of rights vary by law; we do not represent that every state law applies to every service or request.
We may verify control of the relevant account or email and request only information reasonably necessary to evaluate the request. Do not email passwords, integration credentials, Social Security numbers or full brokerage account numbers. We respond within applicable legal time limits and explain lawful exceptions or an available appeal route. We do not retaliate against you for exercising applicable privacy rights. Because these services do not sell or share personal information for behavioral advertising, there is currently no such activity to opt out of, including through a Global Privacy Control signal.
11. Locations and age limits
The service is operated from Massachusetts. Information may be processed in the United States and other locations where necessary providers operate; protections can differ between jurisdictions. This notice does not replace a separate financial-services privacy notice or other notice required for a particular regulated activity.
The services are intended for adults aged 18 or older and are not directed to children under 13. We do not knowingly seek children’s personal information. Contact us if you believe a child submitted information so it can be reviewed and addressed.
12. Changes and contact
Changes will be posted here with an updated date. Material changes will receive additional notice or consent where applicable law requires it. Review this page to understand the practices in effect. For privacy questions, requests or a legally available appeal, contact Lucas Callado at calladolucas@gmail.com, Boston, Massachusetts, United States.