Legal

Privacy Policy

Last updated: August 19, 2026

Your data stays yours. We do not sell or share your personal information with third parties beyond what is necessary to operate the Service. Your broker API credentials are encrypted and used solely to execute your own trading instructions.

1. Information We Collect

Account Information: When you register, we collect your email address and a password (stored as a one-way hash). We may also store your display name and subscription details.

Broker & Data Feed Credentials: When you connect a brokerage or data feed account, we collect the API credentials you provide. These are encrypted at rest and used only to authenticate with your broker or data provider on your behalf.

Trading Data: We store information about your strategies, backtests, paper trades, and trade logs so you can review and manage your activity. This data is tied to your account.

Usage Information: We collect basic analytics about how you interact with the Service (e.g., feature usage) to improve the product. This is aggregated and not tied to your identity.

2. How We Use Your Information

We use your information to:

  • Operate, maintain, and improve the Service.
  • Authenticate you and secure your account.
  • Execute trading instructions through your connected broker accounts.
  • Send you service-related notifications, such as trade alerts and account updates.
  • Process subscription payments and manage billing.
  • Respond to support requests and feedback.
  • Comply with legal obligations.

3. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties. We do not share your data with advertisers or data brokers. Your information is used solely to provide the Service to you and to operate the platform.

We only share information with third-party service providers when strictly necessary to operate the Service (described below), and only to the extent required for them to perform their function.

4. Data Sharing & Third Parties

We share information only as needed to operate the Service:

  • Brokers & Data Providers: Your API credentials are sent directly to your chosen broker or data feed to authenticate requests on your behalf. We do not share your credentials with any party other than the provider they belong to.
  • Payment Processors: Subscription payments are handled by our payment provider. We do not store your full credit card details — payment information is processed by the provider.
  • Cloud Infrastructure: The Service runs on cloud hosting and uses standard infrastructure providers to store and process data securely.
  • Legal Compliance: We may disclose information if required by law, court order, or to protect our legal rights.

5. Data Security

We take reasonable measures to protect your information:

  • Broker API credentials are encrypted at rest using industry-standard encryption.
  • Passwords are stored as one-way hashes and never stored in plain text.
  • Access to your data is restricted by authentication and row-level security.
  • Communication with the Service uses encrypted (HTTPS) connections.

No method of transmission or storage is completely secure, but we work to protect your information using commercially acceptable means. You are responsible for keeping your account password and broker credentials confidential.

6. Data Retention

We retain your account and trading data for as long as your account is active. If you delete your account, we will remove your personal information and trading data from our systems within a reasonable period, except where retention is required by law or for legitimate business records.

7. Your Privacy Choices

You have control over your information:

  • Access & Update: You can view and update your account information in the Settings page.
  • Notifications: You can manage email, push, and SMS notification preferences in your notification settings.
  • Broker Connections: You can disconnect any broker at any time, which immediately clears the stored credentials.
  • Account Deletion: You can request deletion of your account and associated data through the in-app account deletion tool or by contacting support.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it.

9. International Users

The Service is hosted in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. and other jurisdictions. By using the Service, you consent to such transfers in accordance with this Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

For questions about this Privacy Policy or your personal data, please use the in-app support chat or contact Hydra Trader support through the app.