Privacy

Data held by this application

The local database stores your account profile, password hash, sessions, roles, agent configurations, paper transactions, and audit history. Passwords are never stored as plain text. Sessions can be revoked by signing out.

External services

Alpaca supplies market data. During an explicitly started agent session, the configured model provider receives the strategy instructions and simulated market/account snapshot needed to propose a decision. Application passwords and market-data API credentials are not included in that prompt.

Visibility

Creators see their own development records. Published agent profiles show evaluation evidence. Operational access is limited by role; an agent creator does not receive investors' account credentials.