Security & Data Handling

Your login

• Two-factor authentication. Protect your login with a 6-digit code from an authenticator app.
• Password you can trust. Your website login password is one-way hashed. It can never be read back, by anyone.

Your API credentials

• Stored encrypted. Your API credentials are kept only in encrypted form.
• OAuth login where supported. For many brokers you can log in on the broker’s own page, so your credentials stay with the broker.
• Share without exposing. Extra protection lets you give your team access to an account while keeping your stored API credentials hidden from them.

Your portfolio data: kept only for support

We take data privacy very seriously.

• Kept for support, and nothing else. We keep a record of your orders, positions, holdings and margins for a limited period. It is there so that our support assistant Artha and our support team can look into a question you ask, or a production issue, and fix it quickly.
• Never used for anything else. Not for trading, not for advice, not for marketing. We never sell it.
• Seen only for support. Only Artha and our support team can look at it, and only to solve a support question or a production issue.
• Only what is needed goes to our AI service provider. Artha uses an AI service provider to write her answers. When you ask her something, only the details needed to answer that one question are sent, for example a short summary of your accounts and the records she looks up for it. Your whole portfolio is never sent, and neither are your API credentials or your password.

We also keep system logs, for a limited period. They record what the system did (logins, orders placed, copies, errors) because they are essential for investigating any production issue you report. And they are transparent: the same information is shown to you in your own searchable activity log and per-order Copy Log, so you can check what happened yourself, any time.

Where your data lives

Anything we do keep, such as your encrypted credentials, is held on servers in India, in encrypted form.

Where your software runs

Our software runs on Google Cloud, in its Mumbai, India region — one of the world’s most trusted and secure cloud platforms. Being hosted in India means fast, low-latency performance for Indian markets, with strong security and high reliability.

You stay in control

• Kill Switch. The broker account owner can stop trading on the account at any time.
• Our staff cannot trade your account. Every order is set up and controlled by you.
• Auto-pause on repeated login failure. An account that keeps failing login is set non-live automatically until you fix the credentials.
• Large-order safety check. A confirmation step before a very large order, so a slip does not become a costly mistake.
• Static IP. Every account needs a dedicated static IP, and we can provide it. On an IPv4 broker you can use your own IP instead if you prefer.

Safe by design

• Order speed limit. The software keeps the order rate below ten orders per second. This is a fixed, built-in limit.
• Your broker’s retail API. It connects through the standard API your broker gives to retail users, using your own login and static IP.

Tools only

Stocks Developer is a software tool. It gives no advice and makes no trading decisions for you. All trading decisions are yours. You set up and control every activity, and you can stop it at any time.

We are a software company. We build the tools; we do not sell, rent, or share trading strategies.

Questions about security? Email help@stocksdeveloper.in.