Privacy Policy

Account data — name, email address, and a hashed password (if you sign up with email) or your provider profile ID (if you sign up via Google, GitHub, or Discord). We never receive or store your password from those providers.

Billing data — subscription plan and status. Card details are collected and stored directly by Stripe; WaiTrade never receives or stores full card numbers.

Usage data — watchlist entries, portfolio holdings, recorded backtests, and Bot Builder configurations you create, so the platform can function as intended.

Referral data — if you arrive via an affiliate link, a referral cookie and a one-way hashed signal (never your raw IP address) are used to attribute the referral for commission purposes.

• To operate your account, dashboard, and subscription;
• To enforce plan-based limits (e.g. algorithm portfolio caps by plan);
• To generate Bot Builder output from the strategy parameters you provide;
• To attribute and pay affiliate commissions accurately;
• To respond to support and contact requests;
• To detect fraud and abuse of the referral program.

We share data only with service providers necessary to operate WaiTrade: Stripe (payments), and the OAuth providers you choose to sign in with (Google, GitHub, Discord — only to authenticate you, per their own privacy terms). We do not sell personal data.

Account data is retained while your account is active. If you delete your account, personal data is removed except where retention is required for legal, tax, or fraud-prevention purposes (for example, affiliate commission and payout records, which are kept as an immutable financial ledger).

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us through the contact form. We will respond within a reasonable timeframe and verify your identity before acting on the request.

WaiTrade uses essential cookies for authentication (session cookies) and referral attribution (a single HttpOnly referral cookie, set only when arriving via an affiliate link). We do not use third-party advertising or cross-site tracking cookies.

Passwords are hashed with bcrypt; sessions use signed, HttpOnly cookies; payment data never touches our servers. See our Security page for more detail.

WaiTrade is not directed at, and does not knowingly collect data from, individuals under 18.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Questions about this policy can be sent through our contact form.