1. Information We Collect

We collect information that you voluntarily provide to us when you register for the Service, express an interest in obtaining information about us or our products, or otherwise contact us. The personal information that we collect depends on the context of your interactions with us and the Service.

Brokerage Connection and Authentication Data

Due to the nature of our automated trading software, we interact with your brokerage accounts using secure, industry-standard protocols. We do not collect or store your brokerage passwords. Here is how we handle your authentication and connection data:

User Authentication

We do not handle primary user authentication on our own servers. All account creation and login authentication is managed securely by a trusted, industry-standard third-party identity provider.

Broker Access (OAuth)

SharkSignals utilizes OAuth authentication to request authorized, limited access to your broker accounts on your behalf to execute trades.

Passwords

We never see, collect, process, or store your brokerage account passwords on our servers or databases.

Access Tokens

To maintain the connection to your broker, we store short-lived access tokens generated via the OAuth process. These tokens are encrypted, temporary, and strictly used to execute your predefined trading signals.

Account and Usage Data

• Personal Information: Name, email address, and contact preferences provided during account registration.

• Financial Information: Payment and billing details are collected and processed directly by our secure third-party payment processors (e.g., Stripe). We do not store full credit card numbers on our servers.

• Trading Configurations: The rules, alerts, risk parameters, and webhooks you configure within the SharkSignals application to facilitate your automated trading.

• Log and Usage Data: Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Service, which may include your IP address, browser type, and device information.

2. How We Use Your Information

We use the information we collect or receive for the following legitimate business purposes:

• To Facilitate Account Creation and Logon Process: Utilizing our third-party authentication providers to manage secure access to your account.

• To Execute the Core Service: Using your stored short-lived OAuth tokens to route TradingView signals to your connected broker (e.g., NinjaTrader) based strictly on the parameters you define.

• To Bill and Manage Subscriptions: Processing payments, managing your subscription tier, and preventing fraudulent transactions.

• To Improve Our Service: Analyzing usage data to identify bugs, optimize connection speeds, and develop new features for the platform.

• To Communicate With You: Sending you administrative information, technical notices, updates, security alerts, and support messages.

3. How We Share Your Information

We prioritize the confidentiality of your trading strategies and personal data. We do not sell, rent, or trade your personal information or trading data to third parties. We only share information in the following situations:

• Service Providers: We may share data with third-party vendors, service providers, contractors, or agents who perform services for us (e.g., secure identity authentication, payment processing, cloud hosting, and data analytics).

• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

• Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.

4. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. This includes utilizing third-party authentication, relying exclusively on OAuth protocols for broker access, utilizing encrypted short-lived tokens, and enforcing HTTPS/TLS encryption across our platform.

However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You transmit personal information to and from our Service at your own risk. You should only access the Service within a secure environment and safeguard your own device and network.

5. Data Retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

• OAuth Tokens: Short-lived tokens are routinely overwritten, expired, or deleted by the system as per the protocols of the connecting broker.

• Account Data: Upon verifiable request to close your account, we will deactivate or delete your account and personal information from our active databases, though some residual data may be retained in secure backups for a limited time to comply with legal obligations.

6. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date and the updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

7. Contact Us

If you have questions or comments about this policy, or if you wish to exercise any of your data privacy rights, you may email us at support@sharksignals.com.