Privacy Policy
Last Updated: January 21, 2026
1. Information We Collect
When you use RetroTrading, we collect:
- Telegram User ID: To identify your account and deliver signals
- OAuth Tokens: Temporary access tokens from Alpaca to execute trades on your behalf
- Trading Preferences: Your configured settings like position size limits and strategy
preferences
2. What We Do NOT Collect
We never collect or store:
- Your Alpaca password
- Your bank account information
- Your social security number or personal identification
- Your Alpaca API keys directly (only OAuth tokens)
3. How We Use Your Information
We use your information to:
- Deliver trading signals via Telegram
- Execute trades on your connected Alpaca account
- Monitor your open positions for exit signals
- Apply your configured trading preferences
4. Data Security
We protect your data by:
- Encrypting OAuth tokens at rest
- Using secure HTTPS connections for all API calls
- Never logging sensitive credentials
- Using Alpaca's official OAuth 2.0 flow
5. Third-Party Services
We integrate with:
- Alpaca Markets: For brokerage services and trade execution
- Telegram: For signal delivery and bot interaction
Each service has its own privacy policy that governs their handling of your data.
6. Data Retention
OAuth tokens are retained only while your account is connected. When you disconnect via the /disconnect
command, your tokens are immediately deleted.
7. Your Rights
You have the right to:
- Disconnect your brokerage account at any time
- Request deletion of your data
- Revoke OAuth access directly from Alpaca's dashboard
8. Changes to This Policy
We may update this Privacy Policy. Continued use after changes constitutes acceptance of the new policy.
9. Contact
For privacy concerns, contact us at: privacy@retrotrading.io