1. Scope of This Policy
This Privacy Policy explains what information Cascade Financial Technologies Inc. ("CascadeCopier", "we", "us", "our") collects in connection with the CascadeCopier website, desktop software application, and licensing infrastructure (collectively, the "Service"), how we protect that information, and the choices available to you.
2. Our Fundamental "Zero-Cloud" Architecture
CascadeCopier is engineered with a local-first, zero-cloud credential architecture:
- Broker & API Credentials: Login credentials, trading accounts, and API tokens (e.g., Rithmic R-API, NinjaTrader, Tradovate) are stored exclusively on your local machine using encrypted OS hardware keyrings (Windows DPAPI AES-256). They are NEVER transmitted to external cloud servers.
- Trading Events & Order History: All order observation, multiplier calculation, and execution occur 100% locally in memory on your workstation. We do not monitor, log, or store your trade executions or account balances on our cloud.
- Cloud Infrastructure Scope: Our cloud servers are strictly limited to user authentication, license lease validation, software update delivery, and subscription billing.
3. Information We Collect
3.1 Information You Provide Directly
- Account Data: Name, email address, hashed password, and user ID for portal authentication.
- Billing Records: Transaction identifiers and payment status processed securely via Stripe. We do not store full credit card numbers.
- Customer Support: Correspondence and diagnostics voluntarily provided by you.
3.2 Information Collected Automatically
- Device & License Validation: Hardware machine fingerprint, OS version, application client build version, and license activation timestamps used strictly to enforce plan workstation limits.
- Security & Access Logs: IP address and access timestamps to protect authentication endpoints from brute-force attacks and abuse.
3.3 Data We NEVER Collect
We never access or collect your private broker passwords, API secret keys, order logs, open positions, PnL statistics, or proprietary trading strategies.
4. How We Use Information
We process collected data exclusively to:
- Authenticate your account and issue cryptographically signed software authorization leases;
- Process subscription payments, manage receipts, and execute refunds;
- Deliver authenticated software installer downloads and updates;
- Protect against fraudulent chargebacks and license abuse; and
- Comply with applicable tax and financial record-keeping laws.
5. Data Security & Storage
All cloud communication is encrypted in transit using TLS 1.3. Machine hardware fingerprints are cryptographically hashed using SHA-256 before validation. Account records are stored in geographically distributed secure cloud databases with strict role-based access control (RBAC).
6. Your Data Rights (GDPR & CCPA Compliance)
Depending on your jurisdiction, you have the right to:
- Access, review, or request a copy of your personal account information;
- Request correction of inaccurate account details;
- Request deletion of your account records; and
- Unbind authorized hardware devices at any time via your Trader Portal.
7. Contact Privacy Team
If you have questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact our Data Protection Officer at [email protected].