At Tradecraft, we take your privacy seriously and design our platform with security in mind. By using our website or services, you agree to the practices described below. If you have questions, you can contact us anytime.
Privacy Policy
Last updated: April 2026
Tradecraft ("we," "us," or "our") operates the Tradecraft platform at usetradecraft.io. This policy explains what information we collect, how we use it, and the choices you have.
Information We Collect
Account information. When you sign up, we collect your name, email address, and a hashed password.
Broker credentials. To execute trades on your behalf, you provide your Alpaca Markets API key and secret key. These credentials are encrypted at rest and are never stored or logged in plaintext. They are used exclusively to interact with Alpaca's API on your behalf.
Trading and financial data. We store the activity generated through your account, including agents you create, cash allocations, orders submitted, fills, positions, and portfolio state. This data is necessary to operate the service.
AI agent configuration. When you deploy a hosted agent, we store your strategy prompt, schedule, model selection, and data source preferences. We also retain run logs, including the market data and news context fed to the model and the reasoning trace it produced.
Usage data. We collect standard web analytics data such as browser type, device, pages visited, and interaction patterns to understand how the platform is used and to improve it.
Cookies. We use cookies to maintain your session and remember authentication state. We may also use lightweight analytics cookies. You can manage cookies through your browser, though disabling session cookies will prevent you from logging in.
How We Use Your Information
We use your information to provide and operate the Tradecraft platform — creating and managing agents, executing and recording trades through Alpaca, running hosted agents on schedule, and reconciling your portfolio state. We also use it to send account-related communications such as trade confirmations, security alerts, and service updates. We do not use your trading data or strategy prompts to train models or build products for third parties.
Third-Party Integrations
Alpaca Markets. Tradecraft transmits your broker credentials and order instructions to Alpaca to execute trades. Alpaca's own privacy policy governs how they handle data on their end. Your Alpaca account remains yours — Tradecraft acts as an authorized intermediary.
Anthropic. Hosted agent runs use Claude models via the Anthropic API. When an agent executes, your strategy prompt and the market context we assemble are sent to Anthropic for inference. We do not send your broker credentials or personally identifiable information to Anthropic.
X / Twitter. If you enable social sentiment as a data source for a hosted agent and provide a Twitter Bearer Token, that token is used solely to retrieve market-relevant data for your agent's runs. We do not store or use it for any other purpose.
Infrastructure and analytics providers. We work with trusted vendors for hosting, logging, and analytics. These providers access only the data necessary to deliver their services and are contractually required to protect it.
We do not sell your personal information or your trading data to any third party.
Data Security
Broker credentials are encrypted at rest. API keys are SHA-256 hashed before storage and displayed only once at creation. All traffic between your client, our servers, and Alpaca is encrypted in transit. Access to production systems is restricted and audited. No system is completely immune to risk, and we encourage you to rotate your API keys and use paper trading while evaluating the platform.
Data Retention
We retain your account and trading data for as long as your account is active or as needed to operate the service. If you close your account, we will delete your data within 30 days, except where we are required to retain it for legal or compliance purposes.
Your Rights and Choices
You can request access to, correction of, or deletion of your personal information at any time by contacting us at the address below. You may also revoke Tradecraft's access to your Alpaca account at any time by rotating your Alpaca API keys. To stop receiving marketing emails, use the unsubscribe link in any such message.
Changes to This Policy
If we make material changes, we will notify you by email or by a notice in the dashboard before the changes take effect.
Contact
Tradecraft Support — usetradecraft.io