Privacy Policy
Last updated: October 25, 2026
AFPR — Andrew Finkle's Pattern Recognition ("AFPR", "we", "us") is an educational technical-analysis publishing service operated by Andrew Finkle. This policy explains what personal information we collect when you use afpr.com, the member platform that is replacing our Substack and Slack services, why we collect it, and the rights you have over it. Questions about this policy, or any request under it, go to andy@afpr.com.
Information we collect
- Account details — your name, email address, a securely hashed password (we never store your password in plain text), and whether you are a professional or individual investor, which you tell us when you sign up or join the email list.
- Membership activity — the channels you subscribe to, the charts you follow, your watchlist and the alerts it generates, your notification preferences, and your comments, replies, and reactions in the member area.
- Requests and applications — beta access requests, institutional applications (including firm type and portfolio range, if you provide them), and email-list signups.
- Billing records — if you pay, your subscription and payment history with us: plan, status, amounts, and dates. Payments are processed by Stripe and PayPal. Your card number goes directly to them; we never receive or store full card numbers.
- Technical information — the cookies and browser storage described in our Cookie Policy, and standard server logs (IP address, browser type, pages visited, timestamps) kept for security and operations.
How we use it
- To run your account and give you the content your tier includes — channels, charts, the Screener Suite and watchlists, and alerts you opted into.
- To send the email you asked for: membership notifications, alert digests, and AFPR updates for email-list subscribers.
- To review beta requests and institutional applications and respond to them.
- To bill subscriptions, prevent fraud and abuse, moderate member discussions, and keep the service secure.
- To understand, in aggregate, which parts of the service members use, so we can improve it.
Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract with you (running your account and subscription), our legitimate interests (security, moderation, service improvement), your consent (email list, optional cookies), and compliance with legal obligations (tax and accounting records).
Who we share it with
We share personal information only with the service providers who run the platform with us, and only what each needs to do its job: our hosting provider (the platform itself), Stripe and PayPal (payment processing), and our email provider (sending notifications and list email). These processors may not use your information for their own purposes. We may also disclose information when the law requires it, or to protect our rights and our members' safety.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. There is no advertising on AFPR.
Email and unsubscribing
Every marketing email carries an unsubscribe link; using it stops list email for that address. Member notification email (new charts, replies, updates, alert digests) is controlled from your member settings, including a full off switch — those settings, not this policy's inbox, are the lever, but if anything keeps arriving after you have turned it off, write to andy@afpr.com and we will fix it.
Your rights
If you are in the EU/EEA or the UK, you have the right to: access the personal information we hold about you; have it corrected (rectification); have it deleted (erasure); receive it in a portable, machine-readable format (portability); object to processing based on legitimate interests; restrict processing in certain cases; and withdraw consent at any time where processing rests on consent. You may also complain to your local data protection authority — but we would rather you wrote to us first so we can put it right.
If you are a California resident, the CCPA/CPRA gives you the right to: know what personal information we collect, use, and disclose; delete your personal information (subject to legal exceptions); correct inaccurate information; and not be discriminated against for exercising these rights. As stated above, we do not sell or share personal information as those terms are defined in California law, so there is no sale to opt out of.
Self-service first: signed-in members can download a copy of their data and delete their account from the Privacy & data section of member settings — no email needed. Anything else, or anything those tools do not cover, write to andy@afpr.com and we will respond within the time the applicable law allows (generally 30 days under the GDPR/UK GDPR and 45 days under the CCPA/CPRA). We may need to verify your identity before acting on a request; we will only ask for what is needed to do that.
Retention
We keep account information while your account is open. When you delete your account, your profile, comments, watchlist, subscriptions, and preferences are deleted with it; billing and transaction records are kept as long as tax and accounting law requires (generally seven years), stripped of what we no longer need. Email-list records are kept until you unsubscribe. Backups age out on a rolling basis.
Security and children
Passwords are stored hashed, sessions are signed and expire, and access to member content is checked on the server for every page. No system is perfectly secure, but we take reasonable technical and organizational measures proportionate to a publishing service of our size. AFPR is a professional service and is not directed at children under 16; do not create an account if you are under 16.
Changes to this policy
If we change this policy materially, we will update the date above and raise the site's legal version, which re-prompts the cookie banner and, where the change affects members directly, we will say so by email or in the member area before the change takes effect.