Privacy Policy

Plain-English summary: we collect what we need to run the Service — your email, your settings, the exchange API keys you choose to connect, and your trading data from your own exchange account. We use it to show your board, execute the instructions you give, and keep the Service safe. We do not sell your data.

1. What we collect

• Account data — email address, display name, and a hashed password (we never store plain passwords).
• Exchange API credentials — if you connect them, your exchange key ID and private key, stored on our server with restricted access, used solely to read your account and transmit the orders you direct.
• Trading and usage data — balances, positions, fills, and settlements read from your exchange account; your settings (stake sizes, caps, modes); pages viewed and actions taken; standard technical logs (IP address, browser type, timestamps).
• Payment data — handled by Stripe. We do not store card numbers; we receive subscription status and the billing identifiers Stripe provides.

2. How we use it

• To operate the Service: your board, alerts, history, practice account, and the automation you enable.
• To execute your instructions on your exchange account through your API credentials.
• To bill subscriptions through Stripe and to respond to support requests.
• To secure the Service: fraud prevention, debugging, and abuse detection.

3. What we share

• Exchanges — orders and account reads are sent to the exchange you connected, using your credentials, on your instruction.
• Service providers — payment processing (Stripe), hosting, and data feeds, each only what they need to perform their function.
• Legal — if required by law, regulation, or valid legal process, or to protect the Service and its users.
• We do not sell or rent personal data, and we do not share it for third-party advertising.

4. Security and retention

API keys and account data are stored server-side with restricted file permissions and are used only by the Service's own processes. No system is perfectly secure; use unique passwords and protect your devices. We keep data while your account is active and as needed for legal, billing, and security purposes, then delete or anonymize it.

5. Your choices and rights

You can disconnect API keys at any time (in the Service or by revoking the key at the exchange), cancel billing on the Billing page, and request access to or deletion of your personal data by contacting the Company; we will honor requests as required by applicable law (including, where applicable, rights under state privacy laws).

6. Cookies

We use essential cookies for login sessions. We do not run third-party advertising trackers.

7. Children

The Service is for adults 18 and over. We do not knowingly collect data from anyone under 18; if you believe a minor has used the Service, contact us and we will delete the account.

8. Changes and contact

We may update this policy; the "Last updated" date above reflects the current version. Material changes will be reflected on this page. Questions or requests: contact the Company through the email on your purchase receipt or the site's support channel.