Privacy Policy
Last updated: October 2026 · All legal pages
What we collect
- Account data: username, e-mail, name, phone (if you give it), plan and payment references.
- Broker connection data: the client ID, API keys and access tokens you save so that orders can be sent from your account. They are encrypted at rest and never shown back in full.
- Trading data: the rules you create, algo settings, signals, orders, positions, paper results and backtests.
- Chat data: the messages you type in the AI Algo Builder, so the builder can keep context and you can revisit drafts.
- Technical data: login times, IP addresses (including the dedicated trading IP created for live trading), device/browser type and error logs.
Why we use it
To run the service you asked for: build and run algos, show your results, send orders through your broker, bill your plan, secure your account and fix problems. We do not sell personal data and do not use your trading data for advertising.
Third parties
- Your broker: receives orders and account queries under your own credentials.
- Market data providers: supply candles and prices.
- AI provider: the text you type into the strategy chat is sent to the AI model provider to be interpreted into rules. Do not type passwords, tokens or other secrets into the chat.
- Payment gateway: processes card, UPI and mandate payments; CandleAlgo never stores full card numbers.
Retention
Trading records are kept while your account exists and for as long as we are required to keep transaction records. You can delete algos and drafts at any time. Ask the operator (see Contact us) to delete your account.
Security
Passwords are hashed; broker credentials and proxy secrets are encrypted at rest; admin access to your account is logged and read-only. See the Data & Security Policy.
Your choices
You can view and change your profile, remove broker tokens, stop algos and export trade history from inside the app. Use Contact us for access, correction or deletion requests.
Operator details on this page come from the platform configuration. Anything marked not configured yet has not been provided yet and is shown as missing on purpose rather than invented. Contact channels appear here as soon as they are configured.