Legal

Privacy

Last updated 7 August 2026

What we deliberately do not hold

This matters more than the list of what we do hold:

• Your broker password. Never. You authenticate on your broker's own login page; we only ever receive an access token.
• Your two-factor (TOTP) seed. Not collected by default. It is optional, off unless you explicitly ask for unattended re-login, and holding one means holding permanent control of an account — which is why we'd rather not.
• Your money. We have no custody and no withdrawal ability.
• Card or bank details. Fee payments are handled by a payment provider; we never see the instrument.

What we do hold

• Identity: your name, email, phone.
• A broker access token, encrypted at rest, which you can revoke from your broker at any time.
• Your trading record on this platform: positions, orders, proposals, daily reports, P&L snapshots, and an event log of what the software did and why.
• Operational logs. Secret-shaped fields are stripped before anything is written to a log, automatically and by default.

How it is separated

Each client's data lives in its own database schema, reachable only by a database role that is explicitly denied access to every other schema. That separation is enforced by the database itself rather than by application code remembering to filter — a difference that matters, because code can forget and a permission cannot.

Each client's desk also runs as its own operating-system process under its own user, with its own configuration directory.

Who we share it with

Nobody, except where strictly required to run the service:

• Your broker — necessarily, to place and manage orders on your instruction.
• Our hosting provider, which stores the encrypted data.
• An AI model provider, which receives market data and anonymised position context to produce trade decisions. It does not receive your name, contact details or credentials.
• A payment provider, for fee collection.
• Law enforcement or a regulator, where we are legally compelled.

We do not sell your data, and we do not use it for advertising.

How long we keep it

While you are a client, and afterwards for as long as we are required to for tax and regulatory record-keeping. On offboarding your schema is archived rather than deleted immediately — for a record of real trades, an accidental irreversible deletion is worse than a delay. You can request full deletion after the retention period.

Your rights

• Get it all back. Ask and we export your complete record in CSV and JSON. We do this automatically when you leave.
• Correct it. Tell us what's wrong.
• Delete it. Subject to the retention above.
• Cut us off immediately. Revoke our broker authorisation from your broker. You don't need our cooperation to do this.

Security, honestly stated

Secrets are encrypted at rest and logs redact them automatically. Client data is separated at the database-permission level. Each desk is isolated at the process and filesystem level.

That said: this runs on a server, and no system is perfectly secure. The single most effective protection is the one built into the design — we do not hold your password, and you can revoke our access yourself at any time, without us.

If we ever suffer a breach affecting your data, we will tell you promptly and directly, with what we know and what to do.

Contact

adventuressmalik@gmail.com