Privacy Policy

Last updated: April 2026

1. Information We Collect

We collect information you provide when creating your account:

• Email address and display name
• Password (stored as a salted hash — never in plaintext)
• Integration credentials (encrypted at rest with Fernet symmetric encryption)
• Usage activity and login events for security audit
• IP addresses and user agent strings for session management

2. How We Use Your Data

• Account authentication and session management
• Platform functionality (signals, strategies, analytics)
• Security monitoring and audit logging
• Email communications (invites, verification, password resets)
• Performance analytics and system improvement

3. Data Security

We implement industry-standard security measures including encrypted credential storage, secure session management, role-based access control, CSRF protection, rate limiting on authentication endpoints, and optional two-factor authentication for admin accounts.

4. Data Sharing

We do not sell or share your personal data with third parties. Integration credentials are used solely for connecting to your specified market accounts and are never exposed to other users or administrators.

5. Data Retention

Account data is retained for the duration of your account. Upon account removal by an administrator, personal data is marked for deletion. Trading signals and analytics data may be retained in anonymized form.

6. Your Rights

You may request access to your personal data, correction of inaccurate data, or deletion of your account by contacting your team administrator.

7. Contact

For privacy inquiries, contact: [email protected]