Privacy Policy

1. Overview

This Privacy Policy explains how TradeHook (operated by Cornucopia Supply Corp) collects, uses, stores, and protects information related to your use of the platform. By using TradeHook you agree to the practices described in this policy.

2. Information We Collect

• Account information: email address, username, hashed password
• Broker credentials: encrypted at rest using Fernet symmetric encryption
• Platform settings: session windows, risk parameters, symbol configuration
• Operational logs: trade logs, webhook logs, P&L data
• Technical data: IP address, browser type, session tokens

We do not collect payment card numbers directly. Payment processing is handled by Stripe, subject to their own privacy policy.

3. How We Use Information

Information is used solely to operate the TradeHook service: authenticating access, executing your configured trading signals, displaying your P&L and logs, maintaining platform security, and providing customer support. We do not use your data for advertising or sell it to third parties.

4. Broker Credential Security

Broker credentials (username, password, API keys) are encrypted at rest using Fernet symmetric encryption before being stored. Credentials are decrypted only in-process at the moment of broker connection and are never transmitted to the dashboard, logged, or shared externally.

5. Data Retention

Your data is retained for as long as your account is active. Trade logs and webhook logs are retained for operational and support purposes. When you delete your account, all personal data, broker credentials, settings, and logs associated with your account are permanently deleted within 30 days.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and all associated data
• Portability — request your data in a portable format
• Objection — object to certain processing of your data

To exercise any of these rights, use the “Delete Account” option in your account settings or contact us via the Support page. Requests will be fulfilled within 30 days.

7. Cookies and Local Storage

TradeHook uses a single authentication cookie (tradehook_token) to maintain your login session. No third-party tracking cookies are set. No advertising cookies are used.

8. Data Sharing

We do not sell your personal information. Data may be shared only with: infrastructure providers necessary to operate the service (VPS hosting), payment processors (Stripe), and when required by law or valid legal process.

9. International Users

TradeHook is hosted on servers located in the United States. If you access the platform from India, the European Union, or other jurisdictions, your data may be transferred to and processed in the United States. By using the platform you consent to this transfer. We comply with applicable data protection laws including GDPR (EU/UK) and the DPDP Act 2023 (India) to the extent applicable.

10. Security

We implement industry-standard security measures including HTTPS/TLS encryption in transit, Fernet encryption for credentials at rest, JWT-based authentication, and access controls. No system is completely secure and we cannot guarantee absolute security.

11. Policy Updates

We may update this policy from time to time. Material changes will be notified via the platform. Continued use after changes constitutes acceptance.

12. Contact

For privacy-related questions or to exercise your data rights, contact us via the Support page at tradehook.io/support.