Privacy Policy

Algomaster.ai is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service. We comply with the General Data Protection Regulation (GDPR) and applicable Norwegian privacy law (Personopplysningsloven). By using the Service, you consent to the practices described in this policy.

The data controller responsible for your personal data is: Norditech AS (Norway), operator of Algomaster.ai Email: legal@algomaster.ai If you have questions about how we handle your personal data, or wish to exercise any of your rights, please contact us at the email address above.

We collect the following categories of personal data: • Email address — provided by you when creating an account, used for authentication and service communications. • Brokerage connection details — the account identifier you provide, and either an access token issued when you authorise us through your broker’s own sign-in or API keys you supply. Tokens and keys are encrypted at rest and are never displayed again after entry. • Trade data — automatically generated records of trades executed through the Service (ticker, quantity, price, timestamps). • Payment data — processed by Stripe. We do not store your credit card numbers or full payment details directly; only subscription status and Stripe customer/subscription IDs.

We use your personal data exclusively for the following purposes: • Operating and providing the Service (authentication, trade execution, account management). • Processing payments and managing your subscription. • Responding to support requests and account inquiries. • Complying with legal obligations. We do not sell, rent, or share your personal data with third parties for marketing purposes.

We use the following third-party services to operate the platform: • Supabase — database hosting and authentication infrastructure. Your data is stored on Supabase servers. See supabase.com/privacy. • Stripe — payment processing. Stripe handles all payment card data. See stripe.com/privacy. • Your broker (Alpaca or Interactive Brokers) — trade execution and market data. Your account identifier and trading instructions are transmitted to the broker you have connected, in order to place orders you have directed. See alpaca.markets/privacy or interactivebrokers.com/privacy. Each of these providers maintains their own privacy and security standards. We encourage you to review their respective policies.

We retain your personal data for as long as your account is active and as needed to provide the Service. Trade history records are retained to provide you with analytics and reporting. If you request account deletion, we will delete your personal data within 30 days, except where we are legally required to retain certain records (e.g., for tax or accounting purposes).

As a data subject under GDPR, you have the following rights: • Right of access — request a copy of the personal data we hold about you. • Right to rectification — request correction of inaccurate data. • Right to erasure — request deletion of your data ("right to be forgotten"). • Right to data portability — receive your data in a structured, machine-readable format. • Right to object — object to processing based on legitimate interests. • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, contact us at legal@algomaster.ai. We will respond within 30 days.

For any privacy-related questions, requests to exercise your rights, or data protection concerns, please contact: Email: legal@algomaster.ai If you believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.