Privacy Policy

This Privacy Policy describes how Hytrade (“Hytrade,” “we,” “our,” or “us”) collects, uses, and protects information when users access the Hytrade platform (the “Platform”).

1. Information We Collect

We collect the following categories of information:

Account Information

• Email address
• Authentication identifiers issued by our authentication provider
• Where you sign in with Google, the account identifier and email address that provider returns to us

Broker Credentials

When you connect a brokerage account, we store the credentials you supply so the Platform can route orders on your instruction. These are encrypted at rest with AES-GCM under a key held separately from the database, are scoped to your user account, and are written once and never returned to any client, including yours. Our own interfaces can report only which venue is connected and when it last changed.

Broker Integration Data

Once an account is connected, we receive and store trading data for that account so the Platform can show your positions, orders and history. This may include:

• Accounts, balances and account status
• Orders, modifications and cancellations
• Fills, including price, size, fees and realized profit and loss
• Open positions and round-turn trade history
• Protective orders and their state
• Risk settings you configure, such as loss limits and trade counts

Platform Usage Data

We record limited diagnostic and interface events so we can detect faults and understand how the Platform behaves in use, including workspace preferences, saved layouts, strategies and alerts you create, and technical events such as connection health and errors. Diagnostic records are bounded and identify accounts by identifier rather than by the contents of your trading.

Market Data

The Platform displays market data obtained from third-party providers. That data describes the market, not you, and is not personal information.

2. How We Use Information

We use the information above only to operate the Platform. Specifically, to:

• Authenticate you and maintain your session
• Route orders you place to the brokerage account you selected
• Display your accounts, positions, orders, history and performance
• Enforce the risk limits and safety controls you configure
• Diagnose faults, monitor reliability and improve the Platform
• Meet legal and regulatory obligations

We do not sell personal information. We do not share it with third parties for their own marketing, and we do not use your trading data to trade against you.

3. How Information Is Shared

We share information only in these circumstances:

• Brokers you connect. Instructions you give the Platform are transmitted to the brokerage you selected, on your authorization.
• Infrastructure providers. We use third parties to host the Platform, store data and deliver market data. They process data on our instructions and are not permitted to use it for their own purposes.
• Legal requirements. Where we are required to by law, regulation, or valid legal process.

4. Security

Broker credentials are encrypted at rest and are never returned to a browser. Access to stored records is restricted per user and enforced by the database rather than only by the application. Connections to the Platform use TLS. No system is perfectly secure, and we do not claim otherwise; we encourage you to use a unique password and to revoke any broker credential you no longer use.

5. Data Retention

Account and trading records are retained while your account is open, because they are what the Platform shows you. Diagnostic records are bounded and expire. When you delete a broker connection, its stored credential is removed. When you close your account, we delete or anonymize the associated records except where we are required to retain them.

6. Your Rights

Depending on where you live, you may have the right to access, correct, export or delete the personal information we hold about you, and to object to or restrict certain processing. You can disconnect a brokerage account at any time from within the Platform. To make any other request, contact us at the address below.

7. International Transfers

The Platform is operated from the United States, and information is processed there. If you access it from elsewhere, you understand that your information will be transferred to and processed in the United States.

8. Children

The Platform is not directed to anyone under 18, and we do not knowingly collect information from children.

9. Changes to This Policy

We may update this policy. When we do, we will revise the “Last Updated” date above, and we will give notice within the Platform where the change is material.

10. Contact

Questions about this policy or about the information we hold can be sent to privacy@hytrade.io.