Back to Home

Global Privacy Policy & Data Protection Notice

Last Updated & Effective Date: July 2026 | Document Ref: ALG-PRIV-001

Entity: Algor Terminal (Data Controller) | Contact: privacy@algor.trade

Compliance Framework: Standard SaaS Data Privacy, UK GDPR, & CCPA Aligned

1. Scope and Purpose

This Privacy Policy outlines how Algor Terminal ("we", "our", or "us") collects, secures, processes, and protects end-user data within our algorithmic trading studio and SaaS application.

2. Data Collection Architecture & Lawful Basis

To comply with the UK GDPR, we process your data under specific lawful bases, primarily the Performance of a Contract (delivering our SaaS features) and Legitimate Interests (platform security).

2.1 Account & Identity Data: We collect basic profile information required for SaaS authentication, including email addresses, display names, and OAuth authentication tokens via our identity provider (Supabase Auth).

2.2 Brokerage Integration Data (OAuth 2.0 Exclusivity): When a user links a third-party brokerage account, authentication is conducted exclusively via OAuth 2.0 Authorization Code Flows or secure API keys. Algor Terminal never collects, intercepts, transmits, or stores raw brokerage account usernames, passwords, or Two-Factor Authentication (2FA) credentials.

2.3 Quantitative & Strategy Data: We store user-created algorithmic trading strategies, backtest parameters, custom webhook endpoints, and automated execution logs within our encrypted database to provide core software functionality.

3. Data Processing & Utilization

3.1 Core Service Delivery: Collected information is utilized exclusively to:

  • Authenticate user access to the Algor Terminal UI.
  • Execute user-authorized webhook signals and route order payloads to connected broker APIs.
  • Display live account equity, buying power, and open position analytics within the user's private dashboard.

3.2 No Proprietary Trading or Front-Running: Algor Terminal and its developers do not inspect, exploit, mirror, or front-run user-created trading strategies or order pipelines. All user strategies are treated as confidential intellectual property of the end-user.

3.3 No Automated Decision-Making: We do not engage in profiling or automated decision-making that produces legal or significant financial effects on the user. All executed trades are the direct mathematical result of user-defined, deterministic webhooks.

4. Data Sharing, Sub-Processors & International Transfers

4.1 No Data Sale or Commercial Licensing: We do NOT sell, rent, lease, or monetize user personal information, strategy logic, or trade execution histories to advertisers, data brokers, or hedge funds.

4.2 Authorized Brokerage Communication: Data is exchanged with integrated brokerage partners strictly through encrypted API requests authenticated by the user's OAuth token or API keys for the sole purpose of fetching account balances and routing execution orders as directed by the user.

4.3 Infrastructure & AI Sub-Processors: We share encrypted data payloads with audited cloud infrastructure providers (e.g., Vercel, Upstash, Supabase/AWS) solely for hosting, queueing, and data retention purposes. Additionally, natural language strategy prompts are processed via Enterprise AI API providers (e.g., OpenAI). We strictly utilize zero-retention commercial API endpoints; your custom trading logic and prompts are NEVER used to train external AI models.

4.4 International Data Transfers: As a global platform, your data may be transferred to and processed in the United States. We ensure compliance with the UK GDPR by utilizing Standard Contractual Clauses (SCCs) and the UK-US Data Bridge for these transfers.

5. Consumer Rights & Account Deletion (UK GDPR & CCPA)

Depending on your jurisdiction (including the UK, EU, and California), you possess the following rights regarding your data:

5.1 Right to Access, Rectification, & Portability: You may request a copy of your personal data, request corrections to inaccurate data, or request your data in a machine-readable format.

5.2 Right to Erasure / Deletion: Users may request full deletion of their Algor Terminal SaaS account and all associated strategy histories by submitting a written request to privacy@algor.trade. Upon verification, all user profile and strategy data will be purged within 30 days.

5.3 Brokerage Revocation: Users may disconnect their linked brokerage accounts at any time via the Algor Terminal Universal Broker Vault. Disconnecting an account immediately invalidates and purges the stored OAuth Access Token from our active production database.

5.4 CCPA "Do Not Sell or Share" Disclosure: Algor Terminal does not sell or share your personal information for cross-context behavioral advertising. You have the right to non-discrimination for exercising your privacy rights.

5.5 Right to Complain: UK users have the right to lodge a complaint with the Information Commissioner's Office (ICO) regarding our data processing practices.