AIFTrades is trading software. We collect the minimum we need to run your account: who you are, what plan you're on, how the product is used, and the brokerage API credentials you choose to connect. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We never take custody of your money — your funds stay in your own brokerage account.
This page tells you exactly what we collect, why, who else sees it, how long we keep it, and how to make us delete it. If you are in California or another US state with a privacy law, sections 10 through 12 are the ones you want.
AIFTrades, Inc. ("AIFTrades", "we", "us", "our") is a Delaware corporation with its principal place of business in San Francisco, California. We operate the website at aiftrades.com and the application at app.aiftrades.com (together, the "Services").
For the purposes of the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), AIFTrades is the business that determines the purposes and means of processing your personal information.
This policy applies to personal information we collect through the Services. It does not apply to the practices of your broker, of Google, or of any other third party whose own terms and privacy policies govern their handling of your information.
The table below lists the categories of personal information we collect, using the category names defined in the CCPA, together with the sources and business purposes for each.
| CCPA category | Examples | Source | Purpose |
|---|---|---|---|
| Identifiers | Name, email address, account identifier, IP address, device identifiers | You; your device; Google Sign-In if you use it | Create and secure your account, authenticate you, communicate with you |
| Customer records | Billing contact details and subscription status | You; our payment processor | Process subscriptions, trials, renewals and cancellations |
| Commercial information | Plan selected, trial start and end dates, billing history, records of services purchased | You; our payment processor | Provide and bill for the Services, keep financial records |
| Internet or network activity | Pages viewed, features used, session timestamps, referring URLs, browser and OS, approximate location derived from IP | Your device; cookies and analytics | Operate and secure the Services, diagnose faults, understand product usage |
| Sensitive personal information | Brokerage API credentials (key and secret) that you choose to connect; account log-in credentials | You | Place and manage trades in your own brokerage account, at your instruction |
| Inferences | Product usage patterns used to improve the Services | Derived from the above | Improve reliability and usability of the Services |
Brokerage API credentials are sensitive personal information under the CCPA. We use and disclose them only for the purposes permitted by section 7027(m) of the CCPA regulations — that is, only to perform the service you asked for, to secure and maintain the integrity of the Services, and to comply with law. We do not use sensitive personal information to infer characteristics about you, and you may limit our use of it at any time by disconnecting your brokerage credentials in the app or by contacting us.
We do not knowingly collect biometric information, precise geolocation, government identification numbers, health information, information about your racial or ethnic origin, religious or philosophical beliefs, union membership, or the contents of your mail, email or text messages. We do not collect information from data brokers.
If you choose to create or access your account using Google Sign-In, Google sends us a limited set of information from your Google account: your name, your email address, your Google account identifier, and your profile picture where one exists. We request only the basic openid, email and profile scopes.
We use this information for one purpose: to create your AIFTrades account and to authenticate you when you sign in. We do not use it to build an advertising profile, we do not sell it, and we do not transfer it to third parties except to the service providers that operate our authentication and hosting infrastructure on our behalf.
Google API Services Limited Use disclosure. AIFTrades' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect AIFTrades from your Google account at any time through your Google account permissions page. Disconnecting stops future sign-ins through Google; it does not by itself delete your AIFTrades account, which you can delete separately as described in section 12.
We do not use your personal information to train machine learning models that are made available to other customers, and we do not use the contents of your account to make decisions about anyone else.
We disclose personal information in the following circumstances, and only for the business purposes described above:
We do not sell personal information, and we have not sold personal information in the preceding twelve months. We do not share personal information for cross-context behavioral advertising, and we have not done so in the preceding twelve months. We do not sell or share the personal information of anyone we know to be under 16.
Because we neither sell nor share personal information as those terms are defined in the CCPA, we do not offer a "Do Not Sell or Share My Personal Information" link. If that ever changes, we will update this policy and provide the required opt-out mechanism before the change takes effect.
We use a small number of cookies and similar technologies:
You can block or delete cookies through your browser settings, and you can opt out of Google Analytics specifically using Google's opt-out browser add-on. Blocking strictly necessary cookies will prevent you from signing in.
We honor the Global Privacy Control (GPC) signal as a valid opt-out request where it applies to us. As required by California Business and Professions Code section 22575(b)(5), we disclose that browsers may transmit "Do Not Track" signals; because there is no common industry standard for interpreting them, we do not respond to DNT signals differently from our normal practice, which is not to sell or share your information in any event.
We keep each category of personal information only for as long as is reasonably necessary for the purpose it was collected for, and then delete or de-identify it. Our current retention criteria:
| Data | Retention | Why |
|---|---|---|
| Account and profile data | For the life of your account, then up to 90 days after deletion | Operate your account; allow recovery from accidental deletion |
| Brokerage API credentials | Until you disconnect them, or account deletion, whichever is first | They are only useful while connected; we delete them immediately on disconnection |
| Trade and forecast journal | For the life of your account, then up to 7 years in de-identified form | Show you your own history; meet financial record-keeping expectations |
| Billing records | 7 years from the transaction | Tax and accounting obligations |
| Support correspondence | 3 years from the last message | Service quality and dispute resolution |
| Analytics data | 14 months | Year-over-year product analysis |
| Security and access logs | 12 months | Detect and investigate unauthorized access |
Where we are required to keep information to comply with a legal obligation, resolve a dispute, or enforce our agreements, we retain it for as long as that requirement lasts.
We maintain administrative, technical and physical safeguards designed to protect personal information, including:
Two things you control that matter more than anything we do. First, use trade-only API keys — never grant withdrawal or transfer permissions to any software, including ours. Second, use a strong, unique password and enable multi-factor authentication on both your AIFTrades account and your brokerage account.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any regulator as required by California Civil Code section 1798.82 and other applicable law.
If you are a California resident, the CCPA gives you the following rights. We will not discriminate against you for exercising any of them — you will not receive a different price or a lower level of service.
Authorized agents. You may use an authorized agent to submit a request. We will ask the agent for written permission signed by you, and we may ask you to verify your own identity directly.
Shine the Light. California Civil Code section 1798.83 permits California residents to request information about disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.
California minors. If you are a California resident under 18 and a registered user, California Business and Professions Code section 22581 allows you to request removal of content you have publicly posted. The Services do not offer public posting, but you may contact us and we will remove any content you have submitted.
Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky and Rhode Island — have rights that are broadly similar to those described above: to confirm whether we process your personal data, to access it, to correct it, to delete it, to obtain a portable copy, and to opt out of targeted advertising, sale, and profiling that produces legal or similarly significant effects.
We do not engage in targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects concerning you. Our trading engine acts on settings you choose; it does not make decisions about your eligibility for credit, employment, housing, insurance, or any other legally significant benefit.
Appeals. If we decline a request, you may appeal by replying to our decision or writing to privacy@aiftrades.com with "Appeal" in the subject line. We will respond in writing within 45 days with our decision and the reasons for it. If your appeal is denied, you may contact your state Attorney General.
Email privacy@aiftrades.com with the request you would like to make, or use the account settings in the app to access, correct, export or delete your data directly. Because we operate exclusively online and have a direct relationship with you, an email address is a designated method for submitting requests under the CCPA.
Verification. To protect your account we will verify your identity before acting. For most requests, verification means confirming control of the email address on the account. For requests involving specific pieces of personal information, we may ask for additional matching information. We use information provided for verification only for that purpose.
Timing. We confirm receipt within 10 business days and respond substantively within 45 calendar days. Where reasonably necessary we may extend by a further 45 days, and we will tell you before we do.
Cost. Requests are free. We may charge a reasonable fee, or decline, if a request is manifestly unfounded or excessive — and we will explain why if that happens.
The Services are for adults. They are not directed to children, and you must be at least 18 years old to open an account. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact privacy@aiftrades.com and we will delete it.
The Services are operated from the United States and are intended for users in the United States. If you access them from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those of your country.
We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page. If the change is material — for example, if we begin collecting a new category of personal information, or disclose information for a new purpose — we will give you notice by email or through the Services before the change takes effect. We review this policy at least once every twelve months, as the CCPA requires.
For any question about this policy, or to exercise a privacy right:
See also our Terms of Service.