Overview
This Privacy Policy explains how MyAlgoAgent (“MyAlgoAgent,” “we,” “us,” or “our”), a product of Shagoon Softech Pvt. Ltd., collects, uses, stores, shares and protects information when you visit our website or use our algo-trading software platform (together, the “Service”). It applies to visitors of the public marketing site and to registered users of the authenticated application.
Information we collect
Account information you provide directly: name and email address when you create an account, any profile information you choose to add, and communications you send us such as support requests.
Usage and device information: pages visited, features used, device and browser type, approximate location derived from IP address (for security and fraud prevention, not precise geolocation), and log data such as timestamps, referring URLs and error reports.
Trading configuration and platform data: strategies, backtest settings, risk limits, and (only with your explicit authorization) broker-connection metadata needed to synchronize orders and positions. We never store your broker account password — broker connections use that broker's own secure API authorization flow.
Information obtained through Google Sign-In
When you choose to sign in with Google, we receive your name, your email address (used as your unique account identifier), your Google profile picture if available, and a unique, non-reversible Google account identifier used internally to link your session to your account.
We request only the openid, email and profile OAuth scopes from Google — the minimum needed for authentication. We do not request access to your Gmail, Google Drive, Google Calendar, contacts, or any other Google service or data. We do not post to any Google service on your behalf, and we do not sell or share this data with third parties for their own marketing purposes.
Why we collect this information
- To create, authenticate and secure your account, including via Google Sign-In.
- To provide, operate and maintain the features of the Service.
- To detect, investigate and prevent fraudulent, unauthorized or abusive activity.
- To maintain audit logs required for a financial-software product handling trading actions.
- To communicate with you about your account, security notices, or support requests.
- To understand aggregate usage patterns and improve reliability and performance.
- To comply with applicable legal and regulatory obligations.
How we store and protect your information
Account and platform data is stored in a managed PostgreSQL database hosted on Amazon Web Services (AWS) infrastructure, protected in transit with TLS/SSL encryption. Sensitive credentials, including any broker API keys, are handled through dedicated secret-management infrastructure, separate from general application data, and are never exposed to client-side/browser code. Access to production data is restricted to what is operationally necessary.
Email communications
We send transactional email only — never marketing or bulk email, and never to a purchased or imported list. Every email we send is triggered directly by an action you take: account verification, a password-reset link, a sign-in (“magic link”) email, or a confirmation that we received a support request or feedback you submitted. If an email to your address bounces or you mark one as spam, our provider (Amazon SES) automatically suppresses future sends to that address until the issue is resolved.
Data retention
We retain account and trading-configuration data for as long as your account remains active, and for a reasonable period afterward as needed to meet audit, security, tax, and legal record-keeping obligations applicable to financial software. You may request earlier deletion as described under “Your rights” below, subject to any retention we are legally required to maintain (for example, records of executed trades).
Your rights
Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; export your data in a portable format; object to or restrict certain processing; and withdraw consent where processing is based on consent (such as disconnecting Google sign-in, or revoking access from your Google account settings). To exercise any of these rights, contact us using the details below. We aim to respond to any data request within 30 days.
International data transfers
Our infrastructure is hosted on AWS and may process data in data centers located outside your country of residence. Where we transfer personal data internationally, we take steps intended to ensure the data continues to be protected in accordance with this Privacy Policy.
Children’s privacy
The Service is not directed to, and we do not knowingly collect personal data from, children under the age of 18. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete it.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational or regulatory reasons. We will update the “Last updated” date above when we do, and, where changes are material, provide additional notice.
Contact us
For privacy questions, data requests, or to exercise any of the rights above, email privacy@myalgoagent.com or see our Contact page. MyAlgoAgent is operated by Shagoon Softech Pvt. Ltd.