Security & Data Handling
How we protect your account, your credentials and your data.
Your API credentials are stored only in encrypted form, on servers in India. Your portfolio data is never stored. Your website password is one-way hashed and can never be read back. Our staff cannot trade your account. You set up and control every activity. Our software runs on Google Cloud in its Mumbai, India region.
Your login
- Two-factor authentication. Protect your login with a 6-digit code from an authenticator app.
- Password you can trust. Your website login password is one-way hashed. It can never be read back, by anyone.
Your API credentials
- Stored encrypted. Your API credentials are kept only in encrypted form.
- OAuth login where supported. For many brokers you can log in on the broker’s own page, so your credentials stay with the broker.
- Share without exposing. Extra protection lets you give your team access to an account while keeping your stored API credentials hidden from them.
Your portfolio data
Your positions, holdings and orders are never stored in a database. The data flows from your broker to your browser and is cleared from memory right after you are done. We never share your data.
Where your data lives
Anything we do keep, such as your encrypted credentials, is held on servers in India, in encrypted form.
Where your software runs
Our software runs on Google Cloud, in its Mumbai, India region — one of the world’s most trusted and secure cloud platforms. Being hosted in India means fast, low-latency performance for Indian markets, with strong security and high reliability.
You stay in control
- Kill Switch. The broker account owner can stop trading on the account at any time.
- Our staff cannot trade your account. Every order is set up and controlled by you.
- Auto-pause on repeated login failure. An account that keeps failing login is set non-live automatically until you fix the credentials.
- Large-order safety check. A confirmation step before a very large order, so a slip does not become a costly mistake.
- Static IP. Each account can get a dedicated static IP where a broker needs one. You can use your own IP instead if you prefer.
Safe by design
- Order speed limit. The software keeps the order rate below ten orders per second. This is a fixed, built-in limit.
- Your broker’s retail API. It connects through the standard API your broker gives to retail users, using your own login and static IP.
Tools only
Stocks Developer is a software tool. It gives no advice and makes no trading decisions for you. All trading decisions are yours. You set up and control every activity, and you can stop it at any time.
We are a software company. We build the tools; we do not sell, rent, or share trading strategies.
Questions about security? Email help@stocksdeveloper.in.
Frequently asked questions
Does it support a static IP I can whitelist with my broker?▾
Yes. Each account can get a dedicated static IP, or you can bring your own.
Does it support broker OAuth login and 2FA?▾
Yes. For many brokers you log in on the broker's own page, and you can protect your own login with a 6-digit code from an authenticator app.
Does it limit how fast orders are sent?▾
Yes. The software keeps the order rate below ten orders per second, as a fixed built-in limit.
Is the software fully compliant with trading regulations?▾
We do not give regulatory or compliance opinions, so we cannot confirm whether any particular use is compliant — please check with the market regulator, your broker, or a qualified professional. What we can tell you: the software is a tool you fully control and can stop any time, it includes features that can help your own compliance setup (static IP, OAuth login, 2FA, a fixed under-10-orders-per-second limit, pre-trade risk checks and a Kill Switch), and we can customize it to a requirement you give us.
Next steps
Thanks for the feedback. Still stuck? Contact support.
Last updated 23 June 2026