Privacy Policy

Draft placeholder for attorney review before public launch.

Information We Store

Stripp3r stores user account information, login activity, Alpaca connection records, order logs, watchlists, audit logs, and user acknowledgements.

Alpaca Credentials

When API-key connection is used, Alpaca API keys/secrets are encrypted before storage. When OAuth is added, OAuth tokens will be encrypted before storage. Credentials and tokens should never be displayed publicly.

Activity Logs

Stripp3r records account and trading-tool activity for transparency, security, troubleshooting, and support.

Trading Data

Stripp3r may retrieve account balances, positions, orders, order history, and related Alpaca account information when authorized by the user.

No Sale of Credentials

Stripp3r should never sell Alpaca credentials, OAuth tokens, or private trading account access.

Security

Users are responsible for protecting their login credentials. Stripp3r should use HTTPS, encrypted secrets, access controls, audit logs, and secure server practices before public launch.