Privacy Policy
1. Scope and contact
This policy describes personal information processed when you use Stratmill's website, workspace, payments and connected trading features. For access, correction, deletion or other privacy questions, contact support@stratmill.com from your account email. Include enough information to identify the request, but never send passwords, API secrets or wallet seed phrases.
2. Information you provide
We process account information such as your email, display name and password hash; strategy ideas, uploaded content, code, configuration and conversations; and support messages. Using exchange or external-platform integrations also involves connection credentials, account identifiers and the trading information needed for that feature. Optional sign-in providers supply the account information needed to authenticate you.
3. Usage and technical records
We keep workspace and experiment records, credit-ledger entries, usage and plan history, and technical records needed for security and reliability. These can include IP addresses, browser information, request times, errors and account activity. Trading features can generate order, position, fill, fee and performance records.
4. Payments and public blockchains
Crypto payments create invoice records linked to your account, including network, token, amount, payment status and transaction identifiers. Verification may associate a public sending address with your invoice. Blockchain transactions are public and can remain visible indefinitely; deleting a Stratmill account cannot delete them. The copy-or-scan checkout does not require your wallet seed phrase or private key. Historical payment flows may have retained authorization signatures or payment-provider references. We do not store full card numbers; where a card provider was used, that provider handled the card details.
5. Why information is used
We use information to authenticate you, run requested research and execution features, display results, deliver support, verify payments, account for credits, investigate errors, protect accounts and meet applicable obligations. Where applicable law requires a legal basis, the relevant basis depends on the activity: providing the requested service, complying with legal obligations, legitimate security and operational interests, or consent where required.
6. AI providers and other service providers
Research, development, review and assistant features send relevant prompts, submitted content, code and results to the AI providers used for those tasks. Hosting, storage, email, authentication, payment and blockchain infrastructure providers also process information required for their services. Connected exchanges receive the requests you authorize. Do not put unrelated sensitive personal information or secrets into a strategy prompt. Provider processing and retention depend on the service and configuration; this policy does not promise that processing stays on Stratmill's own servers.
7. Workspace visibility and disclosures
Account access controls separate private workspaces. Publishing or sharing content changes who can see it; review the relevant sharing or marketplace controls first. Public research and library pages are visible without signing in. We may disclose information when required by law or needed to address fraud, security incidents or legal claims. We do not sell personal data or use it for third-party advertising.
8. Cookies and browser storage
The website uses session cookies to keep you signed in and temporary cookies for sign-in flows. Referral cookies can associate a signup with a referral. Browser storage also remembers preferences such as theme, language and interface settings. Blocking or clearing essential storage may sign you out or stop a feature from working. External resources and services requested by your browser may receive your IP address and request details.
9. Retention and deletion
Account and workspace information is retained to provide the service while the account is active. Some records may need to remain after closure for accounting, dispute resolution, security or legal obligations; retention depends on the record and purpose. Deletion from active systems does not necessarily remove every backup immediately, and public blockchain records cannot be erased. Ask support about the records associated with your account and any applicable retention exceptions.
10. Your choices and rights
Depending on applicable law, you may have rights to access, correct, delete or receive a copy of your personal information, restrict or object to processing, or withdraw consent where processing depends on it. Send requests to support@stratmill.com. We may need to verify your identity to protect your account and explain any limitations that apply. You may also raise concerns with the relevant data-protection authority.
11. Security and international processing
We use password hashing, protected session cookies and account access controls. No system is completely secure. Protect your email account, use a unique password and limit exchange API permissions. Providers may process information outside your country; applicable transfer requirements and safeguards depend on the provider and location. Contact support for questions about a particular integration.
12. Policy updates
We update this policy when practices or features change and identify the version by its updated date. Material changes will be communicated through the platform. Read it alongside the Terms of Service and Refund Policy.