Privacy policy
Version 1. Also see the terms & risk disclaimer.
Who we are
AlgoThink ("we", "the platform") operates this site and app. For any privacy request or question, contact us via the details in your account or the site's support channel.
What we collect, and why
Account: your email and password hash, to run login and account-related mail (legal basis: performance of our contract with you).
Trading configuration: your risk limits, exchange selection, strategy preferences, and trading history (suggestions, positions, trades, reports) — needed to run the platform for you (contract).
API keys: exchange and LLM provider keys you choose to store are encrypted at rest and are only ever sent to the exchange or LLM provider you configured them for (contract, your explicit action).
Payment records: invoices and their gateway payloads, kept for accounting and fraud prevention even after account deletion (legal obligation / legitimate interest).
Activity log: security-relevant actions (logins, key changes, trades, admin actions) with a timestamp and IP, kept for a bounded retention window (legitimate interest — security and support).
Analytics: Google Analytics runs on every visit in a cookieless mode so we can measure traffic and campaign performance (legitimate interest); accepting the cookie banner additionally enables analytics cookies for more accurate visit counting — see "Cookies" section.
Who we share it with
We do not sell your data. It is shared only with the services needed to run the platform:
- The exchange(s) you configure — to place the orders you enable.
- NOWPayments — to process cryptocurrency payments for paid tiers.
- Our outbound mail server — to send verification, password reset, and report emails.
- Anthropic, NVIDIA, and/or OpenRouter — only for AI trade reviews, and only using your own key when you've stored one.
- Telegram — only if you save a chat id, to deliver alerts you opted into.
- Google Analytics — for aggregate traffic and campaign stats; analytics cookies only after you accept the cookie banner.
How long we keep it
Trading data, settings, and API keys are kept until you delete your account from the Account page, at which point they are permanently erased. Payment records and the activity log are retained after account deletion for accounting and security, but no longer identify you personally. Login tokens and other short-lived records expire automatically; the activity log itself is periodically pruned beyond a bounded retention window.
Your rights
You may access, export, or permanently delete your account data at any time from the Account page's "Your data" section — no request needed. This covers the right to access, export (data portability), and erasure. If you have a request our self-service tools don't cover, contact us directly.
International transfers
The processors listed above may process data outside your country. Each is used under its own terms of service and, where applicable, standard contractual safeguards.