Privacy Policy

AlgoSphere Quant provides an AI-powered trader intelligence platform: trade journaling and analytics, behavioral and risk coaching, market intelligence, and optional broker connectivity for execution and account syncing. We are the data controller for the personal data processed through the Service.

For any privacy question, or to exercise the rights described in Section 9, contact us at info@algospherequant.com.

We collect the following categories of data:

Account & identity

• Email address and name, provided directly or via Google OAuth sign-in.
• Authentication identifiers and session tokens, managed through our authentication provider (Supabase Auth).
• Optional profile details you add, such as your trader type and preferences.

Trading & usage data

• Trade journal entries you create — instrument, direction, entry/exit, size, P&L, tags, notes, and any screenshots you upload.
• Trades and account equity automatically imported from brokers you choose to connect.
• Watchlists, strategies, backtests, alerts, and other content you generate in the app.
• Product usage and diagnostic data (pages visited, features used, device and browser metadata) used to operate and improve the Service.

Broker connection data

• Broker account identifiers, account/server labels, connection status, and synced equity.
• Broker API credentials (API keys, secrets, passphrases, or MetaTrader logins) that you choose to provide. These are encrypted before storage — see Section 6.

Payment data

• Subscription tier, status, and billing history.
• For cryptocurrency payments, transaction references and wallet/network metadata processed by our third-party payment processors. We do not store your private keys, and we do not receive or store full card numbers.

Messaging data

• If you link Telegram, we store your Telegram chat ID to deliver signals and account notifications.
• If you provide a number for messaging features, we store it to deliver the notifications you request.

• Provide, operate, and maintain the Service and your account.
• Generate your analytics, coaching, risk, and intelligence outputs from your own trading data.
• Sync, display, and (where you enable it) execute through connected broker accounts.
• Process subscriptions and payments and manage your access tier.
• Send service messages — security alerts, account and billing notices, and signals or notifications you opt into.
• Secure the Service, prevent fraud and abuse, and debug and improve features.
• Comply with legal obligations and enforce our Terms.

Where the GDPR or similar laws apply, we rely on: performance of a contract (to provide the Service you sign up for); legitimate interests (to secure, maintain, and improve the Service); consent (for optional messaging channels and any non-essential analytics, which you can withdraw at any time); and legal obligation (for tax, accounting, and compliance).

We do not sell your personal data. We share it only with service providers (“sub-processors”) who process it on our behalf, under contract, and only as needed to run the Service:

• Cloud infrastructure & database — hosting, authentication, and storage of your account and content.
• Broker APIs — when you connect a broker, we exchange data with that broker to read your account and, if you enable it, place orders. Your relationship with the broker is also governed by the broker’s own privacy policy.
• Payment processors — cryptocurrency payment providers that handle your transactions.
• Messaging & email providers — to deliver Telegram notifications and transactional email.
• Market-data providers — we request market data from third parties to power intelligence features; we do not send your personal trading data to them.

We may also disclose data if required by law, to protect our rights or users’ safety, or in connection with a merger, acquisition, or sale of assets (you will be notified of any change in ownership affecting your data).

Security is foundational to how the Service is built:

• Broker API credentials are encrypted with AES-256-GCM before they are written to the database. They are never exposed to the browser or front-end code.
• Only the server-side execution engine can decrypt credentials, and only to perform the broker actions you authorized.
• Row-Level Security isolates each account’s data so users can only access their own rows.
• Data is encrypted in transit (TLS) and access to production systems is restricted.

No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard safeguards and to notify you and regulators of any breach as required by law.

We use strictly necessary cookies and local storage to keep you signed in, hold your session, and remember preferences. We may use privacy-respecting analytics to understand product usage. We do not use third-party advertising trackers. You can control cookies through your browser settings; disabling essential cookies may break sign-in and core features.

We keep your data for as long as your account is active and as needed to provide the Service. If you delete content (such as a journal entry or broker connection) it is removed from active systems. When you close your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records to meet legal, tax, accounting, or security obligations.

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to:

• Access the personal data we hold about you and request a copy (portability).
• Correct inaccurate or incomplete data.
• Delete your data (“right to be forgotten”), subject to legal retention limits.
• Restrict or object to certain processing, and withdraw consent for optional channels.
• Opt out of the “sale” or “sharing” of personal data — which we do not do.

To exercise any of these rights, email info@algospherequant.com. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

We and our sub-processors may process your data in countries other than your own. Where we transfer data internationally, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect it consistent with this policy.

The Service is not directed to anyone under 18, and we do not knowingly collect data from children. If you believe a minor has provided us data, contact us and we will delete it.

The Service links to third-party sites and lets you connect third-party broker accounts. We are not responsible for the privacy practices of those parties; we encourage you to review their policies. Connecting a broker is your choice and you can disconnect it at any time from the Brokers page.

AlgoSphere provides educational and analytical tools, not financial advice. Trading involves substantial risk. This Privacy Policy governs data handling only and does not alter the risk disclosures in our Terms.

We may update this policy as the Service evolves. Material changes will be posted here with a new “Last updated” date, and where appropriate we will notify you by email or in-app. Continued use of the Service after changes take effect means you accept the revised policy.

Questions, requests, or complaints about this policy or your data:

info@algospherequant.com