To provide our services, we collect the following types of information:
Account Information: Your email address and basic profile information provided via Google OAuth login.
Exchange API Keys: API Keys and Secret Keys for exchanges (e.g., Binance, Upbit) that you voluntarily connect to our platform.
Usage Data: Information about your bots, trading strategies, simulation configurations, and performance logs.
Clinical Trial Data: We collect and cache publicly available clinical trial information from ClinicalTrials.gov (trial phases, statuses, completion dates, drug names, sponsors). This is public data and does not include any personal health information.
Market Signal Data: Short-selling ratios, institutional/foreign investor trading data, and stock price history collected from public market data sources (KRX, Korea Investment API) for analysis purposes.
2. How We Use Your Data
We use your information strictly for the following purposes:
To execute automated trades on your behalf based on your bot configurations.
To fetch market data and account balances from connected exchanges.
To provide backtesting simulations and performance analytics.
To analyze clinical trial events and generate AI-powered impact assessments for pharma/biotech stocks.
To detect short-selling and institutional trading patterns around clinical trial milestones.
To improve our service and prevent abuse.
3. API Key Security
Your Security is Our Priority
We employ industry-standard security measures to protect your sensitive data:
Encryption: API Secret Keys are encrypted using strong encryption algorithms (e.g., AES-256) before being stored in our database.
No Display: We never display your full Secret Key in the dashboard after initial entry.
Server-Side Execution: Trading logic runs in a secure server environment, not on the client-side browser.
4. Data Sharing
We do not sell your personal data. We only share data with third parties when necessary to provide the service:
Exchanges & Data Providers: When your bot executes a trade or fetches data, request parameters are sent to the respective exchange (e.g., Binance, Tiingo) via their official APIs. Clinical trial data is fetched from ClinicalTrials.gov, a public U.S. government database.
Legal Requirements: We may disclose information if required by law or to protect our rights.
5. Your Rights
You can delete your API keys or your account at any time from the "My Page" settings. Upon deletion, your sensitive data will be removed from our active database.