1. Information We Collect Be specific about the technical nature of the data: Account Data: Name, email, and authentication credentials. Trading Credentials: Encrypted API keys and Secret keys (emphasize that you do not store plain-text keys). Strategy Data: Logic, parameters, and backtesting history. Log Data: IP addresses, browser type, and timestamp of trades executed. 2. How We Use Your Data Execution: To route orders from your strategy to your linked broker. Optimization: Using anonymized, aggregated data to improve platform latency (ensure you state this is non-identifiable). Security: To detect unauthorized access or "fat-finger" trading patterns that might suggest a breach. 3. Data Security & "Non-Custodial" Clause Important Note: If your platform does not hold user funds directly, state this clearly. "We do not have access to your bank account or the ability to withdraw funds. We only facilitate order placement via your broker's API." Mention AES-256 encryption for API storage and Two-Factor Authentication (2FA). 4. Third-Party Sharing Brokers: Sharing data with platforms like Upstox, Zerodha, or Interactive Brokers to execute trades. Analytics: Standard tools like Google Analytics or Mixpanel.