Data Retention Schedule
MadStockAlerts, owned and operated by MD-Money, LLC d/b/a MADSTOCKALERTS. What we keep, why, for how long, and what happens to it afterward.
In effect as of October 9, 2026. Published in full.
Our Privacy Policy says that after the applicable period, information is deleted, deidentified, or securely disposed of under the Company’s retention schedule. This is that schedule. It lists each kind of record we hold, why we keep it, how long we keep it, and what happens to it at the end of that period. It is reviewed at least once a year and whenever a published legal document changes.
1. Retention Periods
Purchase records (what was bought, when, at what price, and the email address charged): kept for seven years from the later of account closure or the last charge, for billing and tax records and as proof of the service purchased on disclosed terms. Then deleted.
Agreement acceptance records (which document versions were accepted, the wording shown, when, and the IP address and browser identifier at acceptance): kept for seven years from the later of account closure or the last charge, as proof of the agreement between us. Then deleted.
Billing and subscription records (subscription status, billing periods, refunds, disputes, and payment-processor identifiers): kept for seven years from the later of account closure or the last charge, for billing, tax, refund, and chargeback purposes. Our payment processors keep their own records under their own policies. Then deleted.
Alert ledger and performance records (every premium alert, its publication, corrections, and closure): kept for the life of the service plus seven years, as the substantiation for every performance figure we publish. Not deleted while the service operates; archived read-only if the service closes.
Account and profile information (email address, display name, sign-in credentials, role, membership tier, sign-in dates, preferences, watchlists, and how you first reached our website): kept for the life of the account. On closure or on request, anonymized within thirty days as described in Section 2.
Incomplete sign-ups (a sign-up whose first payment was never made): the password chosen is deleted after twenty-four hours, and the sign-up can no longer be used to sign in. The email address, display name, plan chosen, when the sign-up was made, whether the email address was verified and whether payment was started, and the agreement acceptance record (which document versions were accepted, the wording shown, when, and the IP address and browser identifier at acceptance) are kept for thirteen months from when the sign-up lapsed or was replaced by a new one, as the record of the sign-up and of the terms accepted. Then deleted.
Support correspondence: kept for three years from the last message in the conversation, then deleted.
Website analytics records (the pages viewed during a visit, how the visit arrived, when each page was left and how long it was in view, the steps taken on the sign-up and checkout pages, device type, approximate country, and, while you are signed in, your account): kept for thirteen months, then deleted. The IP address recorded with them is removed after thirty days.
Free email list entries (your email address, the page you joined from, how you first reached our website, the date you joined, the consent wording you agreed to, whether and when the address became a paid membership, and the visit count and time on the site recorded before you joined): kept while you remain on the list. When you unsubscribe, the entry is reduced to the do-not-contact record described below. On request, deleted within thirty days, except that the email address stays on our do-not-contact list.
Site-visit counters (a keyed, one-way hash of the IP address, the number of visits, time actively spent on the free website, and when the visitor was last invited to join our email list): deleted after ninety days without a visit. The IP address itself is never stored in them.
Platform and application logs, including other security logs: kept for ninety days, then expire automatically.
Sign-in and account audit logs: kept for one year, then expire automatically.
Unsubscribe and do-not-contact list: kept indefinitely so that an opt-out survives the deletion of everything else about you. It holds the email address and, for our free email list, the dates you joined and unsubscribed, the consent wording you agreed to, and the keyed hash of the IP address you joined from, and nothing else.
Database backups: kept for thirty-five days, then roll off automatically. A restored backup is subject to this schedule.
2. Closure, Deletion, and Access Requests
To close your account or ask us to delete your personal information, email mad@madstockalerts.com from the email address on your account. Within thirty days we anonymize the account in place: the email address and display name are replaced with non-identifying values, sign-in credentials are deleted, active sessions are ended, watchlists, preferences, and the record of how you first reached our website are removed, and any active subscription is cancelled. Purchase records, agreement acceptance records, billing records, and the alert ledger are not deleted on request. They are kept for the periods in Section 1 for the billing, tax, and legal reasons stated there, and they retain the email address used for the purchase and the IP address and browser identifier recorded at acceptance. Your email address stays on our do-not-contact list.
To request a copy of the personal information we hold about you, email mad@madstockalerts.com from the email address on your account. We will send it within thirty days. If you are on our free email list but have no account, make either request from the address on the list. We may ask you to confirm your identity before acting on any request, and we may decline a request where the law permits.
3. Contact
Questions about this schedule may be sent to mad@madstockalerts.com, or by mail to MD-Money, LLC d/b/a MADSTOCKALERTS, 215 S Century Ave # 321, Waunakee, WI 53597.