Privacy Policy

1. Information We Collect

1.1. Information You Provide

• Account Information: Name, email address, password (hashed).
• Broker Credentials: API keys and secret keys for your brokerage account(s), encrypted at rest using AES-256-GCM.
• Bot Configurations: Trading strategies, component parameters, risk settings, and other bot configurations you create.
• Communications: Information you provide when contacting support or providing feedback.

1.2. Information Collected Automatically

• Usage Data: Pages visited, features used, clicks, session duration, bot deployment activity.
• Device Data: Browser type, operating system, device identifiers, IP address.
• Log Data: Server logs, error reports, performance metrics.
• Trading Activity Metadata: Trade execution timestamps, order types, success/failure status (for Platform performance monitoring — not for trading analysis or resale).

1.3. Information from Third Parties

• Broker Data: Account balances, positions, order history, and market data retrieved from your connected broker via API.
• Analytics Providers: Aggregated usage analytics from third-party tools.

2. How We Use Your Information

• Providing, maintaining, and improving the Platform.
• Executing trades on your behalf according to your bot configurations.
• Authenticating your identity and broker connections.
• Sending transactional notifications (trade executions, errors, system alerts).
• Providing customer support.
• Detecting and preventing fraud, abuse, and security threats.
• Complying with legal obligations.
• Aggregated, anonymized analytics to improve the Platform (no individually identifiable trading data is shared or sold).

3. How We Protect Your Information

• Broker Credentials: Encrypted at rest using AES-256-GCM. Decrypted only in-memory during trade execution. Credentials are never logged, displayed in the UI, or sent to the frontend.
• Passwords: Hashed using industry-standard algorithms. We do not store plaintext passwords.
• Data in Transit: All communications encrypted using TLS 1.2+.
• Access Controls: Internal access to production systems is restricted on a need-to-know basis with role-based access controls.

4. Information Sharing and Disclosure

We share information only in these circumstances:

• Broker Partners: Your broker credentials are transmitted to your selected broker to execute trades.
• Service Providers: We may share information with service providers who assist us in operating the Platform, subject to confidentiality agreements.
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.
• With Your Consent: We may share information with your explicit consent.

5. Data Retention

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request your data in a machine-readable format.
• Opt-Out: Opt out of non-essential communications.

To exercise your rights, contact: privacy@argixlabs.com

7. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.

8. Children’s Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

9. International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the United States. By using the Platform, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect.

11. Contact

For privacy-related inquiries: privacy@argixlabs.com