Legal
Security
Account-specific authority and verified controls govern the service.
Front door
The production website provides account and product services. Do not paste bank passwords or broker secrets into public or support forms.
Sessions and vault
Signed-in seats use httpOnly Secure cookies. Broker and identity credentials seal per account in an AES-GCM vault on the door. Tokens are never returned to the browser in plaintext. Refresh happens on the host.
Orders
Automated trading uses an owner-bound runtime and explicit activation. Connecting an account alone does not activate trading. Each account can review its runtime status and choose Stop trading. Market hours, account readiness and trading safeguards can prevent execution while activation remains enabled.
Report
If you find a problem, use contact. Do not send secrets in the message body.