Privacy Policy

Last updated: 12 July 2026

AlgoStudio ("the service") is a trading control panel operated for approved account holders. This policy explains what we store and why.

What we collect

• Account data — your email address, password (stored as a salted hash, never in plain text) and optional two-factor secret.
• Broker API keys — keys you connect are encrypted at rest and used only to read balances/positions and to place the orders you configure. We never withdraw funds and never display a stored secret again.
• Trading data — orders, fills, positions and webhook events for your connected accounts, kept so your dashboard, history and audit trail work.
• Technical logs — IP address and user agent on security-relevant actions (sign-in, key changes, trades) for audit and abuse prevention.

What we do NOT do

• No selling or sharing of personal data with third parties.
• No advertising, no tracking pixels, no analytics brokers.
• No custody of funds — your money stays at your broker.

Third parties we rely on

Your data flows to the brokers you connect (e.g. Binance, Alpaca) when executing your instructions, and to Apple/Telegram if you enable app or bot notifications. Each is governed by its own policy.

Retention & deletion

Data is retained while your account is active. Email noreply@algostudio.trade to request account deletion; broker keys are removed immediately when you delete them in the portal.

Security

All traffic is TLS-encrypted. Broker secrets are encrypted with a master key held outside the database. Access to production systems is limited to the operator.