Data & Security Policy

Last updated: October 2026 · All legal pages

• Passwords are stored as salted hashes, never in clear text.
• Broker credentials (API keys, secrets, access tokens) are encrypted at rest and used only to call your broker's API on your behalf. They are never displayed back in full and never sent to any other third party.
• Dedicated trading IP: live orders leave from a connection assigned to your account so that your broker's IP allow-list applies. Its proxy password is encrypted at rest.
• Transport: the site and all broker/API calls use HTTPS.
• Admin access: an administrator can view your account read-only after re-entering their password; each such access is written to an audit log. Administrators cannot see your secrets.
• AI chat: your strategy text is sent to the AI provider to be interpreted. Do not type secrets into the chat.
• Logs: error logs redact tokens. Trading logs are kept for your own review and for support.
• Incidents: if we learn of a breach affecting your data we will notify affected users at their registered e-mail.

Report a security issue through Contact us.

Operator details on this page come from the platform configuration. Anything marked not configured yet has not been provided yet and is shown as missing on purpose rather than invented. Contact channels appear here as soon as they are configured.