Privacy Policy

• Account data: your email address and a securely hashed password.
• Broker connection data: the broker login/server and password you connect for live trading — the password is stored encrypted at rest and used only to operate your strategies.
• Usage & trading data: your strategy settings, demo and live bot state, trade history and logs generated by the Service.
• Billing data: processed by our payment provider (Stripe). We do not store full card numbers; we receive your plan status and limited billing metadata.
• Technical data: IP address and basic request metadata used for security, rate-limiting and abuse prevention.

To provide and secure the Service (performance of contract), to process payments and prevent fraud (legitimate interests / legal obligation), and to communicate with you about your account (contract). Where required, we rely on your consent (e.g. optional alerts) which you can withdraw at any time.

We share data only with processors that help us run the Service: hosting (backend and frontend providers), the payment processor (Stripe), transactional email provider, and error/monitoring tooling. We do not sell your personal data. Brokers you connect are independent controllers of the data you exchange with them.

We keep account and trading data for as long as your account is active and as needed for legal, tax and security purposes. You can request deletion of your account and associated personal data (subject to records we must retain by law).

Passwords are hashed; broker credentials are encrypted at rest; access is restricted and transport is encrypted (HTTPS). No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

Depending on where you live (e.g. under GDPR/UK GDPR or CCPA), you may have rights to access, correct, delete, export, or restrict processing of your data, and to object to certain processing. To exercise them, contact us — see below. You may also complain to your local data protection authority.

Our providers may process data outside your country. Where required, we use appropriate safeguards (e.g. standard contractual clauses) for such transfers.

We use strictly necessary local storage to keep you signed in and to run the console. We do not use third-party advertising trackers.

We may update this policy; material changes will be notified via the Service or email.