Privacy

What we store: your email and display name (for your account), the strategies and backtests you create, your bot’s trades and decision logs, and your notification preferences. Hosting is on Supabase (EU region) and Vercel.

Your broker token is treated like a password. It is encrypted before it touches the database (AES-256-GCM), never logged, never shown again after you save it, and only ever used to read prices and place demo trades on your behalf. You can revoke it at Oanda at any time.

What sharing exposes: a shared backtest page shows the strategy’s rules and results plus your chosen display name — never your email, account details, or balance. Unsharing takes the page down immediately.

What we don’t do: sell your data, run third-party ad trackers, or put cookies on public pages beyond what hosting requires. Site analytics are privacy-friendly aggregates (Vercel Analytics) with no cross-site tracking.

Emails: notification emails about your own bot’s actions are sent via Resend and can be switched off per event type in Settings.

Deleting your account removes your profile and everything attached to it (strategies, backtests, deployments, logs) — contact support while self-service deletion is being built.