Privacy policy

Who we are

Darwidel operates this service from the United Kingdom and is the “data controller” under UK data protection law: the party that decides how your information is used and answers for it. The company is in the course of being registered; its registered name, number and office will be published here as soon as registration completes. For anything on this page, write to privacy@darwidel.com.

What we collect

• Your account. Your email address and a password, which is stored only as a one-way hash. If you sign in with Google or Microsoft we receive your name, email address and profile picture from them, and nothing else.
• Your brokerage records. Once you connect Interactive Brokers: your account number, balances and net asset value, positions, orders, fills and commissions, and the risk limits and strategy settings you choose.
• Technical records. The time, address (IP) and browser of requests, kept in server logs to run and secure the service.

We do not receive your Interactive Brokers password. You enter it on Interactive Brokers’ own gateway, which runs on a server we operate; the application does not read or store it.

What we do with it

• Sign you in and keep your workspace separate from everyone else’s.
• Show your portfolio, work out target positions and, when you approve them, send the orders to your broker.
• Keep a history of what was traded and why, so results can be checked.
• Send the emails the service needs: confirming your address and resetting a password.
• Keep the service running and secure.

The legal basis is the contract between us: we cannot provide the service without this information. Logs are kept under our legitimate interest in a secure service. We do not sell your information, use it for advertising, or make it available to other users.

Who else handles it

These companies handle information as part of the service. The first three process it for us under contract, only for the job listed. Interactive Brokers is your own broker and acts under its agreement with you.

Supabase

Runs sign-in and the database that holds your account and the records described above, and sends the sign-up and password emails.

Vercel

Hosts this website. Like any web host it logs the IP address and browser of each request.

Cloudflare

Carries traffic between the website and our trading server through an encrypted tunnel.

Interactive Brokers

Your broker. It holds your brokerage account; we read from it and send orders to it on your instruction.

Some of them store or process information outside the United Kingdom. Where they do, the transfer is covered by the safeguards UK law requires, such as the International Data Transfer Agreement or an adequacy decision.

Cookies and browser storage

We set only the cookies the service needs: the ones that keep you signed in, and one that tells our trading server which workspace is yours. Your browser also remembers your light or dark theme and which notices you have dismissed. There are no analytics, advertising or tracking cookies, so there is no cookie banner.

How long we keep it

For as long as your account is open. When you close it, or ask us to, we delete your account and your records within 30 days, apart from anything the law obliges us to keep. Server logs are kept only as long as they are needed to run and secure the service.

Your rights

You can ask for a copy of your information, have it corrected or deleted, object to or restrict how it is used, and receive it in a portable form. Write to privacy@darwidel.com and we will answer within one month. If you are unhappy with the answer you can complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk.

The service is for adults. It is not offered to anyone under 18.

Changes to this policy

When this policy changes, the date at the top changes with it. If a change affects how your information is used, we will email you before it takes effect.