Privacy Policy
How we protect your account data, credentials, and portfolios.
Credentials Encryption
Broker API credentials are encrypted in-process and transmitted directly to exchange API nodes.
Strict Isolation
Database tables are scoped per-user. No cross-account data leaks or shared exposure.
Right to Purge
You can delete your API keys, positions, and history instantly from the profile settings.
1. Information We Collect
We collect the minimum amount of information required to deliver automated trading analysis and execution:
- Account Credentials: Email addresses and hashed passwords used to authenticate access to your AntTrader dashboard.
- Exchange APIs: API keys, secret keys, and environment settings (Testnet vs. Live) that you explicitly configure to allow trade execution.
- Portfolio History: Signals, approvals, decision histories, and trade execution results scoped strictly to your account.
- Advisor Conversations: Chat history and queries with the Vertex AI-powered Trader Advisor to support continuous session context.
2. How We Secure Your Data
Your security is our primary focus. We implement strict technical controls:
- All passwords are hashed using industry-standard password derivation functions (Argon2 / bcrypt) and can never be read in plaintext.
- Exchange API credentials are encrypted at rest using secure symmetric encryption algorithms. Decryption occurs only in memory when transmitting orders to target exchange API nodes.
- We enforce SSL/TLS encryption for all data in transit between your browser and the AntTrader backend.
3. Third-Party Services
AntTrader interacts with several third-party platforms to execute its workflows:
- Google Vertex AI / ADK: Used to run the Trader Advisor coordinator and specialist sub-agents. No personally identifiable financial data, account numbers, or API keys are transmitted to these models. Only anonymized market indicators, configurations, and chat messages are processed.
- Binance / Broker Venues: Used to retrieve real-time data and route trade orders at your request.
4. Cookies and Local Storage
We use secure, httpOnly cookies to persist your JWT authentication sessions. These cookies cannot be read by client-side scripts, protecting your session against Cross-Site Scripting (XSS) attacks. We also use browser Local Storage to save visual preferences, such as your selected color theme (Ant Kingdom vs. Cosmic).
5. Execution Responsibility and Portfolio Selection
AntTrader is a human-in-the-loop execution platform. When you approve a signal, you choose the target portfolio that will own the trade. The portfolio environment (PAPER, TESTNET, or LIVE) and its attached broker credential determine whether the order is recorded locally, sent to a testnet exchange, or submitted as a real-market order. We record your portfolio selection and responsibility confirmation with each approval for audit and compliance purposes.
6. Your Data Rights
You maintain absolute ownership of your data. You have the right to inspect, download, or permanently purge any information saved on your account. Deleting your account will instantly remove all associated user records, exchange credentials, and portfolio logs from our active databases.