Security & Data Handling

Two-factor authentication. Protect your login with a 6-digit code from an authenticator app.
Password you can trust. Your website login password is one-way hashed. It can never be read back, by anyone.

Your API credentials

Stored encrypted. Your API credentials are kept only in encrypted form.
OAuth login where supported. For many brokers you can log in on the broker’s own page, so your credentials stay with the broker.
Share without exposing. Extra protection lets you give your team access to an account while keeping your stored API credentials hidden from them.

Your portfolio data — never stored, never analyzed

We take data privacy very seriously, and the strongest privacy protection is simple: we do not keep your portfolio data at all.

Never stored. Your positions, holdings and orders are never stored in a database. The data flows from your broker to your browser and is cleared from memory right after you are done.
Never analyzed. Your portfolio data is processed only to run the features you set up — your own screen, your own alerts, your own copies. We never analyze it for any other purpose.
Not visible to our employees. Because the data is never kept anywhere, there is nothing for anyone to open later. Our employees cannot see your positions, holdings or P&L.
We never share your data. With anyone.

The one thing we do keep, for a limited period, is system logs. They record what the system did — logins, orders placed, copies, errors — because they are essential for investigating any production issue you report. And they are transparent: the same information is shown to you in your own searchable activity log and per-order Copy Log, so you can check what happened yourself, any time.

Where your data lives

Anything we do keep, such as your encrypted credentials, is held on servers in India, in encrypted form.

Where your software runs

Our software runs on Google Cloud, in its Mumbai, India region — one of the world’s most trusted and secure cloud platforms. Being hosted in India means fast, low-latency performance for Indian markets, with strong security and high reliability.

You stay in control

Kill Switch. The broker account owner can stop trading on the account at any time.
Our staff cannot trade your account. Every order is set up and controlled by you.
Auto-pause on repeated login failure. An account that keeps failing login is set non-live automatically until you fix the credentials.
Large-order safety check. A confirmation step before a very large order, so a slip does not become a costly mistake.
Static IP. Each account can get a dedicated static IP where a broker needs one. You can use your own IP instead if you prefer.

Safe by design

Order speed limit. The software keeps the order rate below ten orders per second. This is a fixed, built-in limit.
Your broker’s retail API. It connects through the standard API your broker gives to retail users, using your own login and static IP.

Tools only

Stocks Developer is a software tool. It gives no advice and makes no trading decisions for you. All trading decisions are yours. You set up and control every activity, and you can stop it at any time.

We are a software company. We build the tools; we do not sell, rent, or share trading strategies.

Questions about security? Email help@stocksdeveloper.in.

Frequently asked questions

Can Stocks Developer employees see my portfolio?▾

No. Your positions, holdings and orders are never stored in a database and never analyzed — the data flows from your broker to your browser and is cleared right after. Because it is not kept anywhere, there is nothing for an employee to open later. The only thing kept, for a limited period, is system logs, which record what the system did so a production issue can be investigated — and they are transparent: the same information is shown to you in your own activity log.

Does it support a static IP I can whitelist with my broker?▾

Yes. Each account can get a dedicated static IP, or you can bring your own.

Does it support broker OAuth login and 2FA?▾

Yes. For many brokers you log in on the broker's own page, and you can protect your own login with a 6-digit code from an authenticator app.

Does it limit how fast orders are sent?▾

Yes. The software keeps the order rate below ten orders per second, as a fixed built-in limit.

Is the software fully compliant with trading regulations?▾

We do not give regulatory or compliance opinions, so we cannot confirm whether any particular use is compliant — please check with the market regulator, your broker, or a qualified professional. What we can tell you: the software is a tool you fully control and can stop any time, it includes features that can help your own compliance setup (static IP, OAuth login, 2FA, a fixed under-10-orders-per-second limit, pre-trade risk checks and a Kill Switch), and we can customize it to a requirement you give us.

Your login