Privacy Policy

Account data: your email address and authentication details, handled by a managed identity provider on our behalf. Passwords are stored hashed by that provider; we never see them.

Usage metering: which compute actions you run — backtests, optimizations, discovery jobs — with a timestamp and a cost unit. This is what makes plan limits and future billing possible.

Product data: the strategies, studies, bots and settings you create, plus the results computed from them.

Exchange credentials: if you connect an exchange, the API keys you provide are stored encrypted and are used only to talk to that exchange on your behalf.

Site analytics: aggregate page and performance measurements collected through privacy-friendly, cookie-less web analytics. These do not use cookies and do not build a cross-site profile of you.

To run the product you asked for, to keep accounts separated and secure, to meter usage against plans, to diagnose failures, and to understand which parts of the product are slow or unused.

We do not sell your data, and we do not use your strategies or results to advertise to you.

Managed authentication and database providers, cloud compute providers running our backend, and cloud hosting and analytics providers serving the web application all process data on our behalf as infrastructure providers, under contracts that limit them to our instructions. Some of them operate outside your country, so your data may be transferred and stored abroad. We can tell you which categories of provider handle a specific piece of your data on request.

Exchange venues you connect receive the order and account requests you initiate. What they do with that data is governed by their own terms.

We use a session cookie to keep you signed in. That is a strictly necessary cookie — without it the application cannot tell one account from another.

We do not use advertising or cross-site tracking cookies.

Account, product and metering data are kept while your account is open. If you close your account, we delete or anonymise your data, except where we are required to keep records.

You can remove exchange keys at any time from the settings surface; removal takes effect immediately.

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to us and we will respond within a reasonable period.

Data is processed on infrastructure that may be located outside your country. Where required, transfers rely on standard contractual protections offered by the providers above.

Privacy questions and data requests: hello@thesystem-next.com.