Privacy Policy

Account data — your email and profile basics, handled by our authentication provider. Broker connections — the credentials or tokens you provide, stored encrypted and used solely to route your orders. Trading data — the alerts, orders, fills, balances, and journal entries the Service processes for you. Technical data — logs and diagnostics needed to run and secure the Service.

To provide the Service: route your alerts, reconcile fills, power your dashboard and journal, keep your account secure, and support you. We do not sell your personal data, and we do not share it with advertisers.

Shifu runs on vetted infrastructure providers acting as processors on our behalf: authentication (Clerk), web hosting (Vercel), edge routing (Cloudflare), database (Neon), order services (Fly.io), rate-limiting (Upstash), and payments (Stripe, once billing is live — card details go directly to Stripe and never touch our servers).

Broker credentials are encrypted at rest; traffic is encrypted in transit. Access to production systems is restricted. No system is perfectly secure — report concerns to support@paradoxalgo.com.

We keep your data while your account is active. You can export your trading history at any time, disconnect broker accounts at any time, and request deletion of your account and data by email — we honor deletion requests within 30 days, except records we must keep for legal or security reasons.

We'll announce material changes to this policy in the app or by email. Continued use after changes take effect constitutes acceptance.