Privacy Policy
Effective Date: January 21, 2026
Last Updated: January 21, 2026
1. Introduction
Stratuye ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform.
2. Information We Collect
Account Information:
- Email address
- Password (encrypted and hashed - we never store plain-text passwords)
- Name (if provided)
- Payment information (processed securely through third-party payment processors)
Broker Connection Data:
- Broker API keys and access tokens (encrypted at rest)
- Account positions and balances (read-only)
- Trade execution data
- Performance metrics
Usage Data:
- Log files (IP address, browser type, access times)
- Platform interaction data (pages visited, features used)
- Device information (operating system, device type)
Communication Data:
- Support inquiries and correspondence
- Feedback and survey responses
3. What We Do NOT Collect
We do NOT collect:
- Your funds or money - We never custody, hold, or have access to your cash
- Withdrawal credentials - We cannot withdraw or transfer funds from your broker
- Full brokerage passwords - We only receive API access tokens
- Social Security Numbers or tax IDs - Your broker handles all KYC/AML requirements
4. How We Use Your Information
We use your information to:
- Provide the service: Execute trades, generate signals, display performance
- Process payments: Bill subscription or performance fees
- Communicate with you: Send alerts, updates, and support responses
- Improve the platform: Analyze usage, fix bugs, develop features
- Ensure security: Detect fraud, prevent abuse, protect accounts
- Comply with law: Meet legal and regulatory obligations
5. How We Store Your Information
Security Measures:
- Encryption at rest (AES-256)
- Encryption in transit (TLS 1.3)
- Secure database with access controls
- Regular security audits and monitoring
- API keys and tokens encrypted separately
Data Retention:
- Active accounts: Data retained while account is active
- Closed accounts: Data deleted within 90 days of account closure (except as required by law)
- Trade logs: Retained for 7 years for regulatory compliance
6. Information Sharing and Disclosure
We do NOT sell your personal information.
We may share your information with:
Service Providers:
- Cloud hosting providers (AWS, Google Cloud, etc.)
- Payment processors (Stripe, etc.)
- Email service providers
- Analytics tools (with anonymization)
These providers are contractually obligated to protect your data and use it only for specified purposes.
Broker Integration:
- We exchange data with your broker (Alpaca, Interactive Brokers) via their APIs
- This is necessary to execute trades on your behalf
- Brokers are separate entities with their own privacy policies
Legal Requirements:
We may disclose your information if required by:
- Legal process (subpoena, court order)
- Government or regulatory request
- Enforcement of our Terms of Service
- Protection of our rights, safety, or property
7. Your Rights
You have the right to:
Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and data
Portability: Export your data in a machine-readable format
Opt-Out: Unsubscribe from marketing emails (transactional emails will continue)
To exercise these rights, contact us at [email protected]
8. Cookies and Tracking
We use cookies and similar technologies for:
- Essential cookies: Authentication, session management
- Analytics cookies: Usage statistics (anonymized)
- Preference cookies: Remember your settings
You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality.
9. Third-Party Links
Our Platform may contain links to third-party websites (broker sites, documentation, etc.). We are not responsible for the privacy practices of these external sites. Please review their privacy policies separately.
10. Children's Privacy
Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately.
11. International Users
If you access our Platform from outside [Your Jurisdiction], your information may be transferred to, stored, and processed in [Your Jurisdiction]. By using the Platform, you consent to this transfer.
Note: If you serve users in the EU, include GDPR-specific language. Consult legal counsel for compliance.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information (we do not sell data)
- Right to deletion
- Right to non-discrimination for exercising your rights
Contact us at [email protected] to exercise these rights.
13. Data Breach Notification
In the event of a data breach that affects your personal information, we will:
- Notify you via email within 72 hours
- Describe the nature of the breach
- Explain steps taken to mitigate harm
- Provide guidance on protecting your account
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via:
- Email notification
- Platform notification
- Updated "Last Updated" date on this page
Continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.
15. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
Email: [email protected]
Or use our: Contact Form
🔒 Our Privacy Commitment
We are committed to:
- Transparency: Clear communication about data practices
- Security: Industry-standard encryption and protection
- Non-Custodial: We never hold or control your funds
- Control: You decide how your data is used
- Compliance: Meeting legal and regulatory requirements