Privacy Policy
This Privacy Policy explains how KhomaAlgorithms LLC ("KhomaAlgorithms", "we", "us") collects, uses, and protects information when you use KhomaAPI (the "Service"). By using the Service, you agree to this policy.
1. Information we collect
- Account information: your email address and password (stored as a secure hash), or your Google account identifier if you sign in with Google.
- Broker connection data: when you connect a brokerage account, we receive and store secure access tokens via the broker's OAuth login flow. KhomaAPI accesses Tradovate through Tradovate's official API under Tradovate's API license terms and does not receive or store your broker password. Access tokens are encrypted at rest.
- Trading and usage data: order requests routed through the Service, execution logs, performance metrics (PnL, win rate, drawdown), risk settings, journal entries you create, and similar operational data.
- Technical data: basic log data needed to operate and secure the Service.
2. How we use information
- To operate the Service — route your signals, enforce your risk settings, and display your metrics.
- To authenticate you and secure your account.
- To send transactional and account emails (verification, password reset, performance digests you enable).
- To provide support and improve the Service.
- To process subscriptions through our payment provider.
We do not sell your personal information.
3. Third-party services we use
We share only the data necessary for these providers to function:
- Tradovate (and future supported brokers) — to connect your account and route orders.
- Whop — to process subscriptions and manage membership/billing.
- Resend — to send transactional and digest emails.
- Google — if you choose Google sign-in.
- Hosting & infrastructure providers (e.g., our cloud host and DNS/CDN) — to run the Service securely.
These providers process data under their own privacy terms.
4. How we protect your data
We use encrypted connections (HTTPS/TLS), encrypt sensitive credentials such as broker access tokens at rest, and restrict access to systems that handle your data. No method of transmission or storage is 100% secure, but we work to protect your information using reasonable technical and organizational measures.
5. Data retention
We retain your information for as long as your account is active or as needed to provide the Service and meet legal obligations. You can request deletion of your account and associated personal data (see below); some records may be retained where required by law.
6. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support@khomaalgorithms.net. You can disconnect broker accounts at any time from within the Service.
7. Cookies
We use essential cookies and similar technologies needed for login sessions and core functionality. We do not use them to sell your data.
8. International users
Your information may be processed in countries other than your own. By using the Service, you consent to such processing consistent with this policy.
9. Children
The Service is not directed to anyone under 18, and we do not knowingly collect data from minors.
10. Changes
We may update this policy. Material changes will be communicated through the Service or by email. Continued use means you accept the updated policy.
11. Contact
Questions about privacy: support@khomaalgorithms.net.