Privacy Policy

Summary

You can browse benchmarks and run backtests without an account — including custom strategies — without signing in. An account is only needed when you save a sandbox strategy or create a signal alert. We collect the minimum data required to operate those features, we never see your card details, and we do not sell your data.

Accounts & sign-in

Sign-in is handled by Google OAuth. When you sign in we receive and store your Google account ID, name, email address, and profile avatar. This identifies your account, links your subscription, and enforces free-tier limits. We never post to Google on your behalf and we request no access to files or contacts.

What we store

Our database stores:

• Your account record (Google ID, name, email, avatar URL).
• A random session token in an HttpOnly cookie so you stay signed in (30 days).
• Daily custom-backtest counters used to enforce the free-tier limit.
• Sandbox strategies you save (name, target asset, rule definitions, costs, period, and last backtest metrics snapshot) — up to 100 per account, linked to your account so they sync across devices and can be used for alerts.
• If you subscribe to alerts: the Discord/Slack webhook URL you provide, your digest preference, delivery-failure counts, and the strategies you attach to each alert (copied from your saved strategies at alert creation time).
• If you subscribe to Pro: a mapping between your account and your Stripe customer ID, plus subscription status and renewal date returned by Stripe.

Payments

Payments are processed entirely by Stripe. Card numbers and payment credentials go directly to Stripe and never touch our servers. We receive from Stripe your subscription status and billing period so we can unlock Pro features. Stripe handles tax collection where required.

Alert deliveries

If you create an alert, our dispatcher sends your strategy's daily signals to the Discord or Slack webhook URL you configured. That webhook URL is stored server-side because it is required to deliver your alerts; treat it like a secret and delete the subscription if you rotate it.

Sandbox strategies

When you click Save in the Sandbox we store that strategy on our servers so it syncs across devices and can be reused for alerts. You must be signed in to save. Backtest computation itself still runs in your browser on snapshot price data; only the rule definition and the last backtest metrics snapshot are sent to the server on Save. You can permanently delete any saved strategy immediately — deletions are hard deletes and cannot be recovered.

Newsletter

If you subscribe to the weekly digest we store your email address and a random unsubscribe token. Welcome emails are sent via our email delivery provider (Resend). Every message contains an unsubscribe link; you can also email support@technicalaa.com to be removed. Unsubscribed addresses are retained only to suppress future sends.

Cookies and analytics

We set one essential cookie (session) when you sign in — it contains a random token and is required for accounts and checkout. Without signing in, no cookies are set. We use Cloudflare Web Analytics, a cookieless analytics service that does not collect personal data or track you across sites. We also count anonymous, aggregate funnel events (e.g. “sign-up started”, “checkout started”) server-side — these contain no personal data beyond an optional account identifier and are kept only for overall usage counts.

Market data

Price history is sourced from public market data providers. Your backtest inputs are processed in your browser and are not sent back to us, except when you save a strategy — then its rule definition is stored as described above.

Data sharing

We share data only with the processors required to run the service: Google (sign-in), Stripe (payments), Cloudflare (hosting, database, analytics), Resend (newsletter delivery), and the Discord/Slack endpoints you configure for your own alerts. We do not sell personal data.

Retention & deletion

Signing out deletes your session. Deleting a sandbox strategy removes it immediately and permanently — it cannot be recovered. Deleting an alert removes its webhook, copied strategies, and delivery history. To delete your account and all associated data (including every saved strategy) entirely, email support@technicalaa.com and we will remove it within 30 days.

Contact

Questions about this policy? Email support@technicalaa.com.