Privacy Policy
- We collect only what we need to run your account and your paper-trading bots.
- Your Alpaca keys or access tokens are encrypted, and we use them only to do what you set up in the Service.
- We do not sell your personal information, and we do not use advertising or tracking cookies.
- You can ask us to access, correct or delete your data at any time.
1. Who we are
This policy explains how Originstreat LLC ("we", "us"), which operates HighIQTrade at app.highiqtrade.com and highiqtrade.com (the "Service"), collects, uses and protects personal information. It should be read with our Terms of Service.
2. Information we collect
Information you give us
- Account details: your name, email address, password and beta invitation code. Passwords are stored only as a salted one-way hash (Argon2); we cannot see your password.
- Profile details you choose to add: phone number, mailing address and date of birth.
- Alpaca connection: your Alpaca paper-trading API key ID and secret, or the access token Alpaca issues when you authorize the Service through Alpaca's login. These are encrypted before they are stored.
- Your settings and activity in the Service: bot and strategy settings, bot status, the activity log of each bot, backtests you run, and your acceptance of our risk disclosure.
- Messages you send us, for example to support.
Information we receive from Alpaca
- With your authorization, your paper account details (such as account number, status, cash, buying power and equity), positions, orders, fills and portfolio history, and market data for the symbols you use. We use these to show your dashboard and to run the bots you configure.
Information collected automatically
- Security and log data: IP address, browser type, the time of sign-ins and failed sign-in attempts, and a record of important account actions (such as connecting a broker, changing your email, or starting a bot). We use this to protect accounts, stop abuse and investigate problems.
- Cookies and local storage: one strictly necessary, secure session cookie that keeps you signed in. Your browser may also store small preferences on your device, such as your chosen theme. We do not use advertising, analytics or cross-site tracking cookies.
3. How we use your information
- To create and secure your account, verify your email and keep you signed in.
- To connect to your Alpaca paper account and to place, monitor and cancel paper orders only as directed by the bots and actions you set up.
- To show your portfolio, bot activity, backtests and lessons.
- To send service emails, such as verification links, security notices and important changes. We do not send marketing email unless you opt in.
- To detect, prevent and investigate fraud, abuse and security incidents.
- To comply with law and enforce our terms.
- To understand and improve the Service using aggregated, de-identified information.
4. How we share information
We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We share it only as follows:
- Alpaca: to read your paper account and place the orders your bots or you request. Alpaca handles that data under its own privacy policy.
- Service providers that process data for us under confidentiality obligations: our hosting provider (servers and database), our email delivery provider (account emails), and Google Fonts (loads website fonts, which shares your IP address with Google).
- Legal and safety: when required by law, subpoena or court order, or to protect the rights, safety and security of our users, the public or the Service.
- Business transfers: if the Service is merged, acquired or sold, your information may transfer as part of that deal, subject to this policy.
5. How we protect your information
- All traffic is encrypted in transit with HTTPS (TLS).
- Alpaca keys and access tokens are encrypted at rest with AES-256-GCM, using a key stored separately from the database. They are never shown back to you in full and are never written to logs.
- Passwords are hashed with Argon2. Sign-in attempts are rate-limited.
- Sessions use secure, HttpOnly cookies.
- The Service connects to Alpaca paper (simulated) accounts only.
No system is perfectly secure. If we learn of a breach that affects your personal information, we will notify you as required by law.
6. How long we keep information
We keep your information while your account is open. When you disconnect Alpaca, we delete the stored keys or tokens. When you ask us to delete your account, we delete or de-identify your personal information within 30 days, except for limited records we must keep to meet legal obligations, resolve disputes or protect security (for example, security logs, which we keep for up to 12 months).
7. Your choices and rights
You can update your name, email, address, date of birth and password from your Account page, and disconnect Alpaca at any time from within the Service or from Alpaca. You can also email us to:
- get a copy of the personal information we hold about you;
- correct inaccurate information;
- delete your account and personal information; or
- ask questions about how we use your data.
Depending on where you live (for example, California or Texas), you may have additional rights under state privacy laws. We honor these requests and will not discriminate against you for making them. We will verify your request using your account email before acting on it.
8. Children
The Service is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
9. Where we process data
The Service is operated from the United States, and your information is processed and stored in the United States.
10. Changes to this policy
We may update this policy. If we make material changes, we will update the effective date and notify you in the Service or by email before the changes take effect.
11. Contact us
Originstreat LLC (HighIQTrade)
Email: support@highiqtrade.com
Website: app.highiqtrade.com