Privacy Policy

1. Information we collect

• Account information: email address, password (hashed by Supabase auth — we never see plaintext), and any plan or billing identifiers.
• Broker credentials: for MetaAPI, TradeLocker, and other brokers, we store the credentials you provide (login, password, server / environment / account ID) so the bridge can place orders on your behalf. These are stored in the licenses table and accessed only by the bridge service.
• Trade metadata: incoming TradingView signals, parsed commands, broker responses (order IDs, fills, errors), and timestamps. We retain these for debugging, audit, and service improvement.
• Billing information: Stripe handles all card data. We never see or store full card numbers. We retain the Stripe customer / subscription IDs to look up your plan.
• Operational logs: the bridge logs request / response data (with sensitive fields redacted) for debugging and security monitoring. Logs are kept for up to 90 days.

2. How we use your information

• To run the Service — authenticate you, route signals, place orders, surface state in your dashboard.
• To investigate and fix bugs, security incidents, or abuse.
• To bill for paid plans (via Stripe) and provide support.
• To comply with legal obligations.

We do not sell your personal information. We do not use your trade data to train external models or share it with marketing partners.

3. Who we share with

We share information with service providers that we depend on to run the Service, only to the extent needed:

• Supabase — auth and database hosting.
• Stripe — billing and payment processing.
• Cloudflare — webhook proxy and DDoS protection.
• Railway — bridge service hosting.
• MetaAPI, TradeLocker, TradeStation, Tradovate, and other broker APIs — to place and manage orders on the broker accounts you connect.

We may also disclose information when required by law (subpoena, court order) or to protect the rights, safety, or property of MLTiply or our users.

4. Security

We use industry-standard encryption in transit (TLS) and at rest, and access controls limit who can read sensitive fields. No system is perfectly secure; if we discover a breach affecting your account, we will notify you in accordance with applicable law.

5. Retention

We retain account, license, and trade-history data for as long as your account is active and for up to twelve (12) months after closure for legal, audit, and dispute-resolution purposes. Operational logs are retained for up to 90 days. You can request earlier deletion of most data by contacting us.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Email support@mltiply.io and we will respond within 30 days.

7. Children

The Service is not directed to anyone under 18. We don't knowingly collect information from minors. If you believe we have, contact us and we'll delete it.

8. Changes

We may update this Policy. The effective date above is the most recent revision. Material changes will be communicated via email or dashboard notice.

9. Contact

Privacy questions: support@mltiply.io.