Privacy
Policy.
Last updated: May 2026. Your privacy is important to us. This policy explains what we collect, how we use it, and how we protect it.
1. What we collect
- Account information: email address, collected at sign-up via Supabase Auth.
- Brokerage credentials: API key and secret (or access token) for your connected broker. Encrypted at rest using AES-256. Never displayed after initial entry.
- Subscription data: billing email, Stripe customer ID, subscription status. Managed by Stripe; we do not store full card numbers.
- Usage data: trade signals generated, orders placed, equity curve data pulled from your broker. Used to display your dashboard and improve the system.
- Waitlist emails: email addresses submitted on our coming-soon page, stored to notify at launch.
2. What we do not collect
- We do not collect or store full brokerage account numbers beyond what is needed for API routing.
- We do not track browsing behavior across other websites.
- We do not sell, rent, or share your personal data with third parties for marketing purposes.
- We do not custody, hold, or transfer your investment funds.
3. How we use your data
- To authenticate your account and secure your session.
- To execute trades on your behalf through your connected brokerage.
- To display your portfolio, PnL, and bot activity on your dashboard.
- To process subscription billing through Stripe.
- To send you transactional emails (waitlist confirmation, account notifications). No marketing spam.
4. Third-party services
- Supabase: authentication and session management. Supabase Privacy Policy
- Stripe: payment processing. Stripe Privacy Policy
- Resend: transactional email delivery. Emails sent on our behalf from [email protected].
- Alpaca / Tradier / IBKR: brokerage APIs. Your credentials are governed by your agreements with those brokers.
5. Data security
Brokerage credentials are encrypted at rest using AES-256 Fernet encryption. Access is restricted to the execution system only. All data transmission occurs over HTTPS/TLS. We do not log or display brokerage secrets after initial storage.
6. Data retention and deletion
You may request deletion of your account and associated data at any time by emailing [email protected]. We will delete your account data within 30 days. Stripe billing records may be retained as required by financial regulations.
7. Children
Eltrove is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors.
8. Changes to this policy
We may update this Privacy Policy periodically. Material changes will be communicated to subscribers by email. Continued use of the Service after changes constitutes acceptance.
9. Contact
Privacy questions or data requests: [email protected]