Privacy Policy

BrokerLab is private software operated by its owner for the owner's own trading accounts. It is not offered to the public and does not accept users or clients. This notice explains what the software stores and how it is protected.

What the software stores

Sign-in. Access is limited to the owner, through an authentication provider (Clerk) that holds the owner's email address.

Configuration. Portfolio settings, risk limits, order-size limits, and the record of every order decision.

Broker credentials. Accounts are connected with API keys, or through the platform's own authorization page (for example cTrader), which issues a revocable access token instead of a password. Keys and tokens are encrypted at rest with AES-256-GCM, decrypted only on the server at the moment of use, never logged, never displayed, and never passed to any analysis or processing provider. They can be disconnected at any time and revoked from the platform itself.

Market and account data. Positions, balances and fills read from the connected accounts; public market data, economic calendars and news; and a permanent audit record of every proposal, order and outcome.

What it never does

No personal data is sold or shared, and there is no advertising. No order is sent unless the owner decided it — by approving it, or by enabling automatic approval for a portfolio within limits the owner sets, which can be switched off at any time. Analysis and processing providers never place orders and never receive credentials.

Where data lives

Data is stored on Amazon Web Services (US region) and served through Vercel. Authentication is handled by Clerk. Analysis and processing providers receive only the market data, news and portfolio context an analysis needs. Each provider receives only what it needs to perform its function.

Contact

privacy@brokerlab.ai