Privacy policy

Strata (“Strata,” “we,” “us”) is owned and operated by Timeless Trading LLC. It provides a platform for building, backtesting, and allocating systematic futures strategies. This policy describes the personal information we collect through strataalgo.com and app.strataalgo.com (together, the “Service”), how we use it, and the choices you have. By using the Service you agree to the practices described here.

Account and authentication data. When you create an account, we store your email address and when you signed in. You sign in with a one-time code sent to that email; there is no password. The Strata desktop app keeps its sign-in on your computer.

Billing data. Payments are processed by Stripe. Stripe collects your card details directly; we store only your subscription plan, billing status, and a Stripe customer reference — never full card numbers.

Content you create. Strategies, backtests, portfolios, and related configuration you build in the Service.

Usage and device data. Log data such as IP address, browser type, pages visited, and actions taken — used for security, debugging, and product analytics.

Communications. Messages you send us (e.g. support requests). Waitlist signups capture only your email, the plan you chose, the page you signed up from, and the timestamp. We use them to tell you when your spot opens; our email provider (Resend) stores your address to send those emails, and every one has an unsubscribe link.

The Strata desktop app downloads market data from your own Databento account, directly from your computer, using your own API key. Your key is kept in your computer’s secure credential store (the Keychain on macOS, Windows’ built-in data protection on Windows) and is sent only to Databento. The data you download stays on your computer.

Strata never receives your Databento key, your market data, or anything calculated from it, and we don’t share your personal information with Databento. Your Databento account is governed by Databento’s own terms and privacy policy.

• Provide, operate, and maintain the Service
• Authenticate you and keep your account secure
• Process subscription payments and send receipts
• Send transactional email (account notices, billing alerts) via Resend; marketing email only with your consent, with an unsubscribe link in every message
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Understand product usage to improve the Service
• Comply with legal obligations

We don’t sell your personal information, and we don’t share it with advertisers or data brokers. We don’t train AI models on your strategies without your explicit opt-in.

We share personal information only with service providers that help us operate the Service, under contracts limiting their use of it: payments (Stripe), storage and hosting (Vercel), sign-in and transactional email (Resend). A current subprocessor list is available on request at the address below.

We may also disclose information if required by law or legal process, to protect the rights, safety, or property of Strata or others, or as part of a merger, acquisition, or sale of assets — in which case this policy continues to apply to your data and we will notify you of any change in ownership.

We use a minimal set of first-party cookies: session cookies for signing in to your account on strataalgo.com and preference cookies (e.g. theme). No third-party advertising cookies, and we do not respond to browser “Do Not Track” signals because we don’t track you across other sites in the first place.

Account data is retained while your account is active. If you delete your account, we delete your personal data and content, and purge backups, within 30 days — except records we’re required to keep longer (e.g. billing and tax records retained per applicable law).

Data is encrypted in transit (TLS) and at rest, with access limited to personnel who need it to operate the Service. No method of transmission or storage is 100% secure; if we learn of a breach affecting your personal information, we will notify you as required by law.

You can access, export, correct, or delete your personal data at any time — from your account settings or by emailing privacy@strataalgo.com. We will verify your request and respond within the timeframe required by applicable law, and we will never discriminate against you for exercising these rights.

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing — we do not sell or share personal information as those terms are defined there. Residents of other US states with comparable privacy laws have similar rights, exercisable the same way.

The Service is operated from the United States and your data is processed there. If you use the Service from outside the US, you understand your information will be transferred to and stored in the US.

The Service is for trading professionals and is not directed to anyone under 18. We do not knowingly collect personal information from children under 13; if you believe a child has provided us personal information, contact us and we will delete it.

We may update this policy as the Service evolves. We’ll post the new version here with an updated date, and for material changes we’ll notify you by email or in-app notice before they take effect.

Questions or requests: privacy@strataalgo.com.