Privacy Policy

Last updated: March 26, 2026

1. Information We Collect

When you sign in via Google OAuth, we receive and store:

• Google profile data: your name, email address, and profile picture.
• Authentication tokens: used to maintain your session.

We do not collect passwords. Authentication is handled entirely by Google.

2. Brokerage Data

When your local agent connects, your Interactive Brokers account data (positions, balances, order status) passes through our server to reach your browser. This data is:

• Transmitted over encrypted WebSocket connections (WSS/TLS).
• Cached temporarily in server memory to enable real-time dashboard updates.
• Not written to disk or stored persistently on our servers.
• Cleared from memory when your agent disconnects.

3. Local Agent

The agent application runs on your PC and connects directly to your TWS instance on localhost. Your TWS credentials never leave your machine. The agent communicates with our cloud server using a unique secret token generated for your account.

4. How We Use Your Information

• To authenticate you and maintain your session.
• To route real-time data between your agent and your browser.
• To generate your personalized agent executable.

We do not sell, rent, or share your personal information with third parties. We do not use your data for advertising or marketing purposes.

5. Usage Analytics

We may collect anonymized usage data, such as general interaction patterns and feature usage, to help us understand how the Service is used and to improve it over time. This data does not include your brokerage credentials or API keys and is not shared with third parties.

6. Data Storage

User account records (Google ID, name, email, agent secret) are stored in a SQLite database on our server. Usage analytics are stored in a separate database on the same server. Real-time brokerage data (positions, live prices) is held only in volatile memory and is cleared when your agent disconnects.

7. Data Retention

Your account record is retained as long as you use the Service. Usage analytics are retained for up to 24 months. If you wish to have your data deleted, contact us and we will remove your account and all associated data.

8. Security

We use industry-standard measures to protect your data, including TLS encryption for all connections, secure WebSocket protocols, and Let's Encrypt SSL certificates. However, no system is perfectly secure, and we cannot guarantee absolute security.

9. Third-Party Services

We use Google OAuth for authentication. Google's privacy policy governs how they handle your data during sign-in. We use Google Analytics for website traffic analysis. We also collect server-side usage analytics as described in Section 5.

10. Your Rights

• You may request a copy of the personal data we hold about you.
• You may request deletion of your account and all associated data, including analytics records.
• You may revoke Google OAuth access at any time through your Google account settings.

11. Changes

We may update this policy from time to time. Changes take effect upon posting. We recommend reviewing this page periodically.

12. Contact

For privacy-related inquiries, contact us at baxelas@gmail.com.