Privacy Policy
At IBackTested, we recognize that your quantitative hypotheses, indicator combinations, and backtest results represent your proprietary competitive edge. This policy details our institutional commitments to alpha confidentiality, data isolation, and global privacy compliance.
1. Alpha Confidentiality Guarantee: Zero Strategy Monetization
We do not sell, rent, license, front-run, or train public AI models on your private trading rules, parameter configurations, or backtest telemetry. Your alpha belongs strictly and solely to you.
Unlike traditional retail brokers that profit from order flow routing (PFOF) or multi-tenant signal pooling, IBackTested is an engineering-first software provider funded transparently through compute subscriptions and institutional licensing.
2. Categories of Information We Collect
To execute high-speed vector simulations and provide account authentication, we collect the following limited categories of data:
| Data Category | Specific Data Points | Purpose & Processing Basis |
|---|---|---|
| Identity & Auth | Email address, hashed password, name, session tokens | Account authentication, authorization, and workspace management |
| Strategy Configs | Rule indicators, stop-loss formulas, timeframe parameters | Persisting your private strategy library and compiling vector signals |
| Telemetry & Logs | Execution latency, API endpoint timings, error stacks | System reliability, compute performance optimization, and bug fixing |
| Payment Metadata | If future paid plans launch: billing country and transaction status only (no full card details stored today) | Handled directly by PCI-DSS compliant payment gateways |
3. How We Process and Use Information
We process collected information strictly for:
- Executing your vector backtests and compiling dynamic AI copilot prompts.
- Updating real-time forward test simulation runs and tracking simulated fill positions.
- Maintaining security, preventing automated bot abuse, and verifying authentication.
- Notifying you regarding critical platform updates, account security alerts, or (if future paid plans launch) subscription statuses.
4. Infrastructure Security & Encryption Standards
IBackTested applies institutional-grade technical controls across every layer of the infrastructure:
- In Transit: All HTTP and WebSocket connections are encrypted using TLS 1.3 with strict HTTPS enforcement and HSTS.
- At Rest: Databases and columnar Parquet market caches are encrypted using AES-256 storage volume encryption.
- Authentication: Passwords are cryptographically salted and hashed using Argon2 / bcrypt; API access utilizes cryptographically signed stateless tokens.
- Isolation: Tenant data is logically partitioned in PostgreSQL with strictly scoped user IDs attached to every database query.
5. Third-Party Infrastructure & Data Processors
To deliver continuous real-time market data and reliable cloud uptime, we partner with vetted infrastructure providers:
- Neon PostgreSQL: Enterprise serverless database infrastructure located in secure AWS data centers.
- Tier-1 Market Data Feeds & Liquidity Hubs: Ingests live tick data into local columnar caches without transmitting user identities, strategy logic, or trading parameters to external data providers.
6. Your Global Rights (GDPR, UK-GDPR & CCPA)
Regardless of your geographic location, IBackTested affords all users comprehensive privacy rights:
- Right to Access & Portability: You can export your full strategy library and simulation history in JSON / CSV format at any time.
- Right to Erasure (Right to be Forgotten): You can permanently delete your account, saved strategies, and simulation accounts via your Profile Settings.
- Right to Rectification: You can modify profile details, update credentials, or revoke active sessions instantly.
7. Data Retention & Permanent Deletion
We retain account data only as long as your account remains active. Upon initiating account deletion from the Profile Settings interface, your strategies, personal identifiers, and simulation histories are purged from production databases immediately.
8. Data Protection Officer & Compliance Inquiries
If you have questions regarding this Privacy Policy, data isolation architecture, or wish to exercise your statutory privacy rights, please reach out to our Data Protection Officer: