Privacy Policy

Last updated: July 13, 2026

Short version: we collect the minimum needed to run your account and your bots, we don't sell your data, and your broker API keys are encrypted and never shown back to your browser.

What we collect

• Account info — your username, email, and a securely hashed password (we never store your plain password).
• Order/billing info — your name, email, plan, and payment status. Card payments are handled by our processors (Stripe / PayPal); we don't store full card numbers.
• Your settings & bot data — the configurations, watchlists, notes, and trade logs you create in the app.
• Broker credentials you connect — the API keys you enter for your own broker. These are encrypted at rest and are masked so they're never sent back to your browser.
• Basic technical data — the IP address and request info your browser sends, used for security and to keep the service running.

What we do not do

• We don't sell or rent your personal information.
• We don't take custody of your money or move funds — trades go to your broker account with your keys.
• We don't post ad-tracking pixels to follow you across the web.

How we use data

To create and secure your account, run the features you use (including sending orders to your connected broker when you enable a bot), process payments, send you account and receipt emails, provide support, and improve reliability and safety.

Who we share it with

Only the service providers needed to operate: payment processors (Stripe/PayPal), our email provider (for receipts, resets, and support), and market/broker data providers you use (e.g., Alpaca, and public market-data sources). We may disclose information if required by law or to protect the platform and its members.

Security

Passwords are hashed with PBKDF2; broker secrets and two-factor secrets are encrypted at rest. Access to the site is over HTTPS. No system is perfectly secure, but we work to protect your data and limit what's stored. Enabling two-factor authentication in Settings adds a strong layer to your login.

Data retention

We keep account and order records while your account is active and as needed for legal, tax, and security purposes. You can ask us to delete your account data — email [email protected] and we'll remove what we're not required to keep.

Your choices

• Access, correct, or delete your data by emailing support.
• Disconnect a broker any time by removing its keys in Settings.
• Unsubscribe from non-essential emails; we'll still send essential account/billing messages.

Privacy questions? Email [email protected].