Privacy Policy
Last updated: March 10, 2026
This Privacy Policy describes how ForgeAlpha ("Platform", "Service", "we", "us"), operated by SWR Technologies, collects, uses, and protects your personal information.
1. Information We Collect
Account Information
- Email address — used for authentication, notifications, and communication
- Password — stored as a bcrypt hash; we never store plaintext passwords
Trading Data
- Trade history — uploaded MT5 trade records (CSV, JSON, or HTML format) used for strategy analysis
- MT5 account metadata — login ID, server name, account balance (not your broker password)
- Strategy configurations — rules, indicators, and parameters you create or modify
- Bot activity — trade execution logs, P&L records, capital transactions
Technical Data
- IP address and browser user agent (for security and rate limiting)
- Usage patterns (pages visited, features used)
2. How We Use Your Information
- Service operation — running your trading bots, executing strategies, processing backtests
- AI analysis — your trade history and strategy rules are sent to OpenAI's API for strategy improvement suggestions (see Section 4)
- Communication — account verification, password resets, trading alerts, and service updates via email (Resend)
- Security — detecting unauthorized access, preventing abuse, rate limiting
3. Information We Never Collect or Store
- MT5 broker passwords — passed to MetaApi for account provisioning only, never stored in our database
- Payment information — we do not process payments (free beta)
- Broker account passwords — we never store broker passwords. They are passed to MetaApi for broker authentication only.
4. Third-Party Services
We share data with the following services to operate the Platform:
- MetaApi — MT5 account connection, real-time price data, trade execution. Receives your MT5 login credentials during provisioning only.
- OpenAI — AI strategy analysis and improvement suggestions. Receives anonymized trade statistics and strategy rule structures (no personally identifiable information).
- Resend — Email delivery for account verification, alerts, and notifications. Receives your email address.
- MetaApi — Broker connectivity and trade execution for MT5 accounts. Uses your broker credentials for initial connection only.
- TwelveData — Historical market data for backtesting. No personal data shared.
5. Data Retention
- Active accounts — data retained for the lifetime of your account
- Deleted accounts — data permanently deleted within 30 days of account closure
- Trade history uploads — processed and stored; original files are not retained after analysis
- Backtest results — retained as long as the associated strategy exists
6. Data Security
We implement industry-standard security measures:
- Passwords hashed with bcrypt
- JWT-based authentication with secure token handling
- HTTPS encryption for all data in transit
- Database access restricted to authorized services only
- No broker passwords stored on our servers
7. Your Rights
You have the right to:
- Access — request a copy of your personal data
- Correction — update inaccurate personal information
- Deletion — request deletion of your account and associated data
- Export — download your trade history and strategy configurations
- Object — opt out of non-essential data processing
To exercise these rights, contact us at privacy@forgealpha.com.
8. Cookies
We use minimal cookies:
- Authentication cookie — stores your JWT session token (essential, cannot be disabled)
- Preference cookie — stores UI preferences like theme selection (functional)
We do not use tracking cookies or third-party advertising cookies.
9. Children's Privacy
ForgeAlpha is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email. The "Last updated" date at the top indicates when the policy was last revised.
11. Contact
For privacy-related questions or requests, contact us at privacy@forgealpha.com or visit our Contact page.