Privacy Policy

This Privacy Policy explains how Hotpipe (“Hotpipe,” “we,” “us,” or “our”) collects, uses, and shares information when you use our website, application, and related services (the “Platform”). By using the Platform, you agree to this Policy and our Terms of Service.

Hotpipe is a trading automation tool. We are not a registered investment adviser or broker-dealer, and we do not use your information to provide personalized investment advice or to make trading decisions on your behalf.

1. Information we collect

Account and contact information

When you register or sign in, we collect information such as your email address and authentication-related data (for example, one-time codes and session tokens).

Broker and trading configuration

If you connect a brokerage account, we process connection metadata and tokens required to communicate with the broker on your behalf (such as OAuth tokens), account identifiers you authorize us to see, and the webhook sources, transforms, trade rules, and order records you create or that result from your rules.

Webhook and event data

When a source posts to your inbound URL, we receive the payload you configure that source to send. That may include symbols, prices, strategy names, or other fields you choose to include. You control what third parties send to Hotpipe.

Usage and technical data

We may collect IP address, device/browser information, timestamps, and logs related to API requests, authentication, errors, and security events, to operate and protect the Platform.

2. How we use information

We use information to:

• provide, maintain, and improve the Platform;
• authenticate you, secure accounts, and prevent abuse or fraud;
• execute the automation you configure (including transmitting order instructions to brokers you connect);
• communicate service notices and respond to support requests;
• analyze aggregated or de-identified usage to improve reliability;
• comply with law and enforce our Terms.

We do not sell your personal information. We do not use your trading configuration to give you investment recommendations.

3. How we share information

We may share information with:

• Brokers and integrations you connect — for example, Interactive Brokers — as needed to authenticate and place or manage orders according to your rules;
• Service providers that host infrastructure, email OTP delivery, monitoring, or similar functions, under obligations to protect the data;
• Legal and safety recipients when required by law, regulation, legal process, or to protect rights, safety, and security;
• Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality.

Webhook providers (such as charting platforms) send data directly to URLs you configure; their privacy practices are governed by their own policies.

4. Retention

We retain account, configuration, event, and order-related data for as long as your account is active and as needed to provide the Platform, resolve disputes, enforce agreements, and meet legal obligations. You may request deletion of your account; some records may remain in backups or logs for a limited period, and we may retain information when required by law.

5. Security

We use commercially reasonable administrative, technical, and organizational measures to protect information. No method of transmission or storage is completely secure. You are responsible for protecting access to your email, devices, and brokerage credentials, and for reviewing activity in your brokerage account.

6. Your choices

• Update or correct account email/contact details through the product flows we provide.
• Disconnect brokerage connections and delete webhook sources or trade rules you no longer need.
• Request account deletion or data access by contacting us at the email below (subject to verification and legal exceptions).

7. Children

The Platform is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps.

8. International users

We may process information in the United States and other countries where we or our providers operate. If you access the Platform from outside the United States, you understand that your information may be transferred to and processed in jurisdictions with different data protection laws.

9. Changes

We may update this Privacy Policy from time to time. We will post the revised Policy with an updated “Last updated” date. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

10. Contact

Privacy questions or requests: [email protected].

This Policy is a starting template for the product. Have counsel review retention, international transfers, and any region-specific notices (e.g., CCPA/GDPR) before production launch.