Privacy Policy

1. Who we are

This policy explains how AlgoBotLab ("we", "us") collects and uses personal data when you use our website and platform (the "Service"). We are responsible for the personal data described here. You can reach us at support@algobotlab.com.

2. Data we collect

• Account data: your email address, and your password stored only as a one-way hash (we cannot read it). If you sign in with Google, we receive your Google account ID and email address instead of a password.
• Content you create: your strategies, their version history, and your backtest settings and reports.
• Credit and payment records: your credit balance, purchases and usage. Card details are entered on Stripe's page and are never seen or stored by us.
• Technical data: when something goes wrong, we record the error, the page or request involved and, if you are signed in, your account ID, so we can fix it. Your IP address is used briefly to limit repeated login attempts and may appear in short-lived server logs.

We do not collect payment card numbers, government IDs or your trading account details.

3. How we use your data

• to create and run your account and sign you in (needed to provide the Service);
• to run the backtests you request and show your reports (needed to provide the Service);
• to process purchases and keep accounting records (needed to provide the Service and required by law);
• to send account emails such as verification and password reset (needed to provide the Service);
• to keep the Service secure, prevent abuse and fix errors (our legitimate interest in a safe, working service).

We do not sell your personal data, show you third-party ads, or use your data for profiling or automated decisions that affect you legally.

4. Cookies and browser storage

We do not use advertising or analytics cookies. The Service stores a few items in your browser's local storage that are needed for it to work: your sign-in token, your light/dark theme choice, and whether we have already asked about browser notifications. You can clear them at any time in your browser settings; you will then be signed out.

5. Service providers

We share data only with providers that help us run the Service, and only as needed for their task:

• Vercel — hosts the website
• Oracle Cloud — hosts our application servers and backtest workers
• Neon — hosts our database
• Cloudflare — provides domain name services
• Resend — sends account and notification emails
• Stripe — processes payments
• Google — provides optional sign-in, only if you choose to use it

We may also disclose data if required by law or to protect our rights and the safety of our users.

6. International transfers

Our providers may store or process data in countries other than yours, including the United States and the European Union. Where required, these transfers are covered by appropriate safeguards such as the providers' standard contractual clauses.

7. How long we keep data

• We keep your account data and content while your account is active.
• When you delete your account, it is disabled immediately: your email address is replaced with an anonymous placeholder and your password and Google link are removed. Your strategies, reports and credit history are then no longer tied to any identifiable person; credit and payment records are kept for accounting and legal purposes.
• Database backups are kept for up to 30 days and then deleted.
• Error records are kept only as long as needed to investigate and fix problems.

8. Your rights

Depending on where you live (for example under the EU/UK GDPR, Türkiye's KVKK or US state privacy laws), you may have the right to:

• access the personal data we hold about you and get a copy of it;
• correct inaccurate data;
• delete your data;
• object to or restrict certain uses of your data;
• receive your data in a portable format.

You can change your password or delete your account yourself on the Account page. For any other request, email us at support@algobotlab.com. We will reply within 30 days and may need to confirm your identity first. You also have the right to complain to your local data protection authority.

9. Security

Passwords are stored with bcrypt hashing, all connections to the Service use encrypted HTTPS, and access to our systems is restricted. No system is completely secure, but we work to protect your data and will notify you and the authorities of a data breach where the law requires it.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a minor has created an account, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of this page, and for significant changes we will notify you by email or on the Service.

12. Contact

Questions or requests about your data? Email us at support@algobotlab.com.