Privacy Policy

01What we collect

We try to collect the minimum that makes the product work. In practice that falls into four buckets.

• Account data. Your email address, a display name, a hashed password (or the identifier from a single sign-on provider), your plan, and your communication preferences.
• Content you create. Strategies and AlgoBeamScript files, chart layouts, watchlists, screener presets, alert rules, saved backtests and anything you publish to the community library.
• Usage data. Which pages and features you open, how long a backtest ran, error traces, device type, browser, coarse location derived from your IP address, and the IP address itself for security logs.
• Billing data. Plan, invoices, country for tax, and the last four digits and brand of the card. We never see or store full card numbers — those go straight to our payment processor.

We do not buy personal data from brokers, we do not ask for your brokerage credentials, and we have no interest in your trading account balance.

02How we use it

Each category has a purpose attached to it. We use your data to:

• run the Service — authenticate you, save your work, deliver alerts, bill your plan;
• answer support requests, which sometimes means looking at the strategy that failed to run;
• improve the product — aggregate, de-identified counts of which features get used and where people get stuck;
• keep the platform safe — rate limiting, abuse detection, fraud checks and audit logs;
• send you service email, and marketing email only where you asked for it or where the law allows it with a one-click opt-out.

We do not sell your personal data, and we never have. We do not use the content of your private strategies to train models that serve other customers. When you use AI Quant, the context of your query is processed to answer that query — it does not become training data for someone else’s answers.

03Cookies and analytics

We use a small number of cookies and similar technologies, in three groups:

• Essential. Session and authentication cookies, a CSRF token, and the preference that remembers whether you chose the light or dark theme. These cannot be turned off without breaking sign-in.
• Analytics. Privacy-respecting, aggregate measurement of page views and feature usage. We ask for consent where consent is required, and we do not use analytics cookies to build advertising profiles.
• Attribution. A referral or affiliate cookie set for 90 days when you arrive through a partner link, so the partner is credited correctly. See the affiliate programme for how that works.

You can clear cookies in your browser at any time; clearing the essential ones just signs you out. We honour Global Privacy Control signals where your browser sends them.

04Third-party processors

We run a small stack and use established vendors rather than building everything ourselves. Categories of processor we rely on:

• cloud hosting and content delivery, for the application and its databases;
• payment processing, which handles card details end to end;
• transactional email and push-notification delivery, for alerts and receipts;
• error monitoring and product analytics;
• the customer support desk, and the model provider behind AI Quant.

Each processor is bound by a written agreement that limits them to acting on our instructions, requires appropriate security, and forbids them from using your data for their own purposes. We keep a current list of named sub-processors and will send it to you on request at [email protected]. If we add a processor that materially changes how your data is handled, we post it here.

05How long we keep it

We keep data for as long as it is doing a job, then delete it. As a rule of thumb:

• Account and content data — for as long as your account is open. When you close it, we delete or irreversibly anonymise your personal data within 30 days.
• Backups — encrypted, rotated, and fully expired within 90 days, so a deleted record disappears from backups on that cycle.
• Security and audit logs — 12 months, then deleted.
• Invoices and tax records — retained for as long as accounting and tax law requires, typically several years, regardless of account closure.
• Published library scripts — stay published until you unpublish them, because other users are building on them. Unpublishing is available at any time.

06Your rights: access, export and deletion

Wherever you live, you can ask us to do the following, and we will do it without making you argue for it:

• Access — tell you what we hold about you and why.
• Export — hand it over in a portable format. Strategies, scripts, watchlists and alert rules can be exported from your settings at any time without asking us.
• Correct — fix anything inaccurate.
• Delete — remove your account and the personal data attached to it, subject to the records we are legally required to keep.
• Object or restrict — stop or limit a particular use, including withdrawing consent to analytics or marketing.

Write to [email protected] and we aim to answer within 30 days. If you are in a region with a supervisory authority for data protection, you can complain to it — though we would rather you gave us the chance to fix things first.

07International transfers and security

MAZURAPPLIANCES LTD operates internationally, so your data may be processed in a country other than the one you live in — most commonly the United States and the European Union. Where data leaves a region that restricts transfers, we rely on recognised safeguards such as standard contractual clauses with the receiving processor, plus encryption in transit.

On the security side, the baseline is:

• TLS on every connection, and encryption at rest for databases and backups;
• passwords stored only as salted hashes, with optional two-factor authentication;
• least-privilege internal access, with production access logged and reviewed, and no routine access to your private strategies;
• regular dependency patching and independent penetration testing.

No system is perfectly secure. If a breach affects your personal data we will tell you and the relevant authority promptly, describe what happened, and say what we are doing about it. Report a vulnerability to [email protected].

08Children

AlgoBeam is built for adults making decisions about their own money. The Service is not directed at children, and you must be at least 18 — or the age of majority where you live — to hold an account, as set out in the terms of service.

We do not knowingly collect personal data from children. If you believe a child has created an account, write to [email protected] and we will close it and delete the data.

09Changes and how to reach us

When this policy changes we update the date at the top of the page. For a change that materially affects how we handle your data we also email account holders, at least 30 days before it takes effect, so nobody finds out afterwards.

The data controller is MAZURAPPLIANCES LTD (company number 15979498), 1 High Street, Brighouse, HD6 1DE, England. Phone: +44 7418 604367. Privacy questions, access requests and deletion requests all go to [email protected]. For anything about the contract itself, see the terms of service; for how to read our performance figures, see the risk disclaimer.