Privacy Policy

1. About Us

AlgoPulse Research Ltd ("AlgoRelay," "we," "us," or "our") is the data controller responsible for your personal data. We operate the AlgoRelay web application (the "Service"), which provides a relay service from TradingView notification webhooks to supported brokers for automated order placement.

This privacy policy explains what personal data we collect, why we collect it, how it is used, the lawful basis on which it is processed, how it is stored, and with whom we share it.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Data: When you create an account, we collect your email address and a password. You may also provide your name and other profile information.
• Payment Data: When you purchase a subscription, payment processing is handled by Stripe. We do not store full payment card numbers on our servers. Stripe may share your billing name, email, and postal address with us for record-keeping.
• Broker Credentials: To provide the relay service, you may provide API keys, tokens, or other credentials for your brokerage accounts. These are encrypted at rest and used solely to execute your orders.
• Webhook Configuration: You may configure webhook URLs and parameters that define how TradingView alerts are relayed to your broker.
• Communications: If you contact our support team, we collect your name, email, and any information you provide to help resolve your issue.

2.2 Information Collected Automatically

• Log Data: When you access the Service, our servers automatically record information including your IP address, browser type, operating system, referring URLs, and pages visited.
• Usage Data: We collect information about how you interact with the Service, such as features used, webhook execution logs, and error reports. This helps us improve the Service and diagnose issues.
• Cookies: We use a session cookie (algorelay-jwt) to authenticate your login session. We do not use cookies for tracking or advertising purposes.
• Device Information: We may collect information about the device you use to access the Service, including device type and browser version.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service, including processing your TradingView webhook signals and placing orders with your broker.
• To authenticate your account and ensure the security of your data and our systems.
• To process subscription payments and manage billing through Stripe.
• To communicate with you about your account, including service announcements, billing notifications, and support responses.
• To detect, prevent, and address technical issues, fraud, and abuse.
• To comply with legal obligations and enforce our Terms of Service.

Important notice regarding automated decision-making (Article 22 GDPR): The Service operates as an automated relay, executing order instructions solely based on webhook signals and parameters you configure. AlgoRelay does not make independent decisions about your trading activity; all logic is defined by you through your TradingView alerts and broker configuration. You remain responsible for the trading strategies and alerts you configure.

4. Legal Basis for Processing (EEA Users)

If you are located in the European Economic Area (EEA), our processing of your personal data is based on the following lawful grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (e.g., providing the relay service, processing subscriptions).
• Legitimate Interests: Processing is necessary for our legitimate interests in operating and improving the Service, ensuring security, and preventing fraud.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations.
• Consent: Where required by law, we will obtain your consent before processing your data for specific purposes.

5. How We Share Your Information

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: We engage trusted third parties who act on our behalf to support our operations, including:
  • Stripe — payment processing (see their privacy policy at stripe.com/privacy)
  • Cloudflare — hosting, CDN, and D1 database (see their privacy policy at cloudflare.com/privacypolicy)
• Brokers: When you configure broker connections, we transmit your order instructions (symbol, quantity, action, etc.) to the broker API you have authorized. Broker credentials are encrypted and stored solely for this purpose.
• Legal Compliance: We may disclose your information if required to do so by law or in response to valid legal requests by public authorities (e.g., a court order or subpoena).
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any change in ownership.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit using TLS.
• Encryption of sensitive data (such as broker API keys) at rest.
• Access controls and authentication mechanisms to restrict access to personal data.
• Regular security reviews and updates.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you the Service. Upon account deletion, we will delete your personal data within 30 days, except where we are required to retain certain information to comply with legal obligations (e.g., tax and accounting records, which may be retained for up to 7 years).

Webhook execution logs may be retained for up to 90 days for troubleshooting and Service improvement purposes.

8. Your Rights

8.1 General Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Restriction: Request restriction of processing of your personal data.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to processing of your personal data based on legitimate interests.

8.2 EEA and UK Users

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK).

8.3 California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the right to request disclosure of the categories and specific pieces of personal information we have collected, the right to request deletion of your personal information, and the right not to be discriminated against for exercising these rights. We do not sell your personal information.

To exercise any of these rights, please contact us using the information below. We may need to verify your identity before processing your request.

9. International Data Transfers

Your information may be transferred to and processed on servers located in countries outside your country of residence, including the United States and the European Union, where our service providers operate. When we transfer your data internationally, we take appropriate safeguards to ensure your data is protected in accordance with applicable data protection laws (e.g., Standard Contractual Clauses).

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Third-Party Links

The Service may contain links to third-party websites (e.g., TradingView, brokers). We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review their privacy policies before providing them with your personal data.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the new policy on this page and, where appropriate, by email notification. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

Email: support@agorelay.io

Mail: AlgoPulse Research Ltd
1010 Belford Avenue
Grand Junction, Colorado 81501