Privacy Policy

This Privacy Policy describes what information StratosTrader ("the Service") collects from you, how it's used, and how it's protected.

1. Information we collect

• Account information: your email address and a hashed (never plaintext) password.
• Brokerage credentials: the Alpaca API key and secret you connect. These are encrypted at rest and are never displayed back to you, logged in plaintext, or shared with anyone.
• Trading configuration and activity: the grid parameters you set (step size, quantity per rung, maximum position) and the resulting order/fill history on your connected brokerage account, so the Service can operate and so you can review your own history.
• Billing information: handled directly by Stripe, our payment processor. We store your Stripe customer ID and billing history, but we do not ourselves store your full card number.
• Technical data: basic request logs (IP address, timestamps) used for security (e.g. login rate-limiting) and troubleshooting.

2. How we use this information

Solely to operate the Service: to authenticate you, to run the trading strategy you've configured on your own brokerage account, to calculate and bill the fees described in the Terms of Service, and to provide support if you contact us. We do not sell your personal information, and we do not use your brokerage credentials or trading activity for any purpose other than running the Service on your behalf.

3. How we protect it

Brokerage API keys are encrypted at rest. Passwords are hashed, never stored in plaintext. Access to production systems is limited to the Service's operator. No method of storage or transmission is 100% secure, but we take reasonable, industry-standard measures to protect your information.

4. Third parties

We share information only with the third parties necessary to operate the Service: Alpaca (your brokerage, per the credentials you provide) and Stripe (for payment processing). We do not sell or rent your information to advertisers or data brokers.

5. Data retention and deletion

We retain your account and trading history for as long as your account is active, and as needed to satisfy legal, tax, or accounting obligations after that. You can request deletion of your account and associated data by contacting us at the address below, subject to records we're required to retain by law.

6. Changes to this policy

We may update this policy from time to time; material changes will be reflected in the version above.

7. Contact

Questions about this policy can be sent to support@stratostrader.com.