Privacy Policy

TradeXecutor Privacy Policy 1. Introduction TradeXecutor ('we', 'our', or 'the Platform') is a software automation/execution platform that allows users to route and process user directed trading instructions to third party brokers using secure authorization technologies such as OAuth. This Privacy Policy explains how we collect, use, store, and protect personal information when users access or use the TradeXecutor website, applications, and related services. 2. Information We Collect We may collect several types of information to operate the platform: Account Information – such as name, email address, authentication identifiers, and account login information through our authentication provider (Clerk). Broker Authorization Data – limited authorization tokens received through broker OAuth integrations such as Tradeovate. TradeXecutor does not store broker passwords. Usage Data – including IP address, browser type, device identifiers, session activity, and log data used to maintain platform security and performance. Payment Data – if subscription billing is used, payment processing may be handled by third■party processors and TradeXecutor does not store full credit card information. 3. How We Use Information We use collected information for the following purposes: • To create and manage user accounts. • To authenticate users and maintain platform security. • To transmit user directed trading instructions to connected brokers. • To monitor system performance and detect fraud or abuse. • To communicate important service notifications or updates. We do not sell personal information to third parties. 4. Third Party Services TradeXecutor relies on third party infrastructure providers and service partners including but not limited to: • Clerk (user authentication) • Amazon Web Services (cloud hosting infrastructure) • Broker platforms such as Tradeovate for trade execution • Domain and infrastructure providers such as GoDaddy • Google (Gmail email services) • Cloudfare (cloud hosting and email infrastructure) These providers may process limited data required to operate the platform. 5. Data Storage & Security TradeXecutor stores data using secure cloud infrastructure hosted on Amazon Web Services. Reasonable administrative, technical, and organizational safeguards are implemented to protect user information. However, no internet■based system can be guaranteed to be 100% secure. 6. International Users TradeXecutor is accessible globally. By using the platform, users acknowledge that their information may be transferred to and processed in Canada, the United States, or other jurisdictions where our service providers operate. 7. GDPR & International Privacy Rights For users located in the European Economic Area or similar jurisdictions, users may have the right to access their personal data, request correction of inaccurate data, or request deletion of personal data where legally permissible. 8. Data Retention We retain information only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce platform agreements. 9. Children's Privacy The platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. 10. Changes to This Policy" We may update this Privacy Policy periodically. Continued use of the platform after updates constitutes acceptance of the revised policy. 11. Contact For privacy inquiries or requests regarding personal information, users may contact TradeXecutor through the official support contact listed on the platform. TradeXecutor Cookie Policy 1. Introduction This Cookie Policy explains how TradeXecutor uses cookies and similar technologies when users access the TradeXecutor platform and website. Cookies are small data files stored on your device that help websites function properly and improve user experience. 2. Types of Cookies We Use Essential Cookies – Required for authentication, security, and platform functionality such as maintaining login sessions. Performance Cookies – Help us understand how users interact with the platform so we can improve system reliability and usability. Security Cookies – Used to detect suspicious activity and protect accounts. 3. ThirdParty Cookies Some cookies may be placed by thirdnparty services integrated into the platform, including authentication providers (such as Clerk) or infrastructure tools used for platform security and performance. 4. Managing Cookies Users can manage or disable cookies through their browser settings. Disabling certain cookies may affect platform functionality. 5. Changes to This Policy TradeXecutor may update this Cookie Policy from time to time. Continued use of the platform after updates constitutes acceptance of the revised policy. TradeXecutor Data Processing Agreement (DPA) 1. Purpose This Data Processing Agreement ('DPA') governs how TradeXecutor processes personal data on behalf of users when providing the TradeXecutor platform and services. 2. Roles TradeXecutor acts as a data processor for certain user information necessary to operate the platform. Users act as the data controller with respect to information they provide while using the service. 3. Categories of Data Personal data processed may include account identifiers, authentication data, IP addresses, system logs, and limited broker authorization tokens necessary for platform functionality. 4. SubProcessors TradeXecutor may rely on infrastructure and service providers including but not limited to: • Amazon Web Services (cloud infrastructure) • Clerk (authentication services) • Payment processors where applicable These providers process data only to the extent required to operate the platform. 5. Security Measures TradeXecutor implements reasonable administrative, technical, and organizational safeguards including encrypted connections, secure infrastructure, and access controls. 6. International Transfers Personal data may be processed in Canada, the United States, or other jurisdictions where service providers operate secure infrastructure. 7. Data Subject Rights Users located in jurisdictions such as the European Economic Area may request access, correction, or deletion of their personal data where applicable.