Privacy Policy

Last updated: April 11, 2026

Introduction

AlgoChef ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website algochef.app and use our services.

Please read this Privacy Policy carefully. By using AlgoChef, you agree to the collection and use of information in accordance with this policy.

---

Information We Collect

Information You Provide

Account & Waitlist Information

• Email address
• Name (optional)
• Trading preferences (markets you trade, trading status)

When You Use Our Services

• Strategy and trade data you upload for analysis
• Portfolio configurations you create
• Settings and preferences

Communications

• Emails or messages you send us
• Feedback and survey responses

Information Collected Automatically

Usage Data

• Pages visited and features used
• Time spent on pages
• Clicks and interactions
• Referring website or source

Device Information

• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Screen resolution

Cookies and Tracking

• Session cookies (required for the service to function)
• Analytics cookies (to understand how you use our service)
• Preference cookies (to remember your settings)

---

How We Use Your Information

We use the information we collect to:

Provide Our Services

• Process your waitlist registration
• Grant access to AlgoChef Analytics when available
• Analyze your uploaded strategy data
• Generate reports and insights

Communicate With You

• Send product updates and announcements
• Respond to your questions and support requests
• Send important notices about your account

Improve Our Services

• Understand how users interact with our platform
• Identify and fix bugs and issues
• Develop new features based on user needs
• Analyze aggregate usage patterns

Marketing (With Your Consent)

• Send newsletters and product updates
• Share educational content about systematic trading
• Notify you about new features and offerings

You can opt out of marketing emails at any time by clicking "unsubscribe" in any email or contacting us.

Lawful Basis for Processing (EU/EEA/UK Users)

For users in the European Union, European Economic Area, and United Kingdom, we process your personal data on the following lawful bases under GDPR Article 6:

• Contractual necessity (Art. 6(1)(b)) — to provide the Service you signed up for, including account creation, strategy analysis, score calculation, and reporting. Without this processing, we cannot deliver the Service.
• Legitimate interest (Art. 6(1)(f)) — to improve our product, monitor security, prevent fraud, and maintain the health of the Service. You may object to processing based on legitimate interest at any time by contacting us.
• Consent (Art. 6(1)(a)) — for the use of anonymized and aggregated versions of your strategy data in research, benchmarking, publications, and marketing materials, as described in our Terms of Service. You grant this consent via the acceptance checkbox at account signup. You may withdraw consent at any time by deleting your account; withdrawal does not affect the lawfulness of processing carried out before withdrawal.

---

Your Strategy Data

Your data is yours. We take special care with the trading strategy data you upload:

• We do not sell your strategy data. Ever.
• We do not share your strategy data with third parties.
• We do not use your strategy data to trade against you or share with anyone who might.
• We do not train AI models on your individual strategy data.

Your uploaded trade data is used solely to provide you with analysis and insights within the AlgoChef platform.

Aggregate & Anonymized Data We may use anonymized, aggregated data (with no personally identifiable information and with strategies combined across users so that no individual strategy can be reconstructed) for product research and development, statistical benchmarking, academic or industry publications, case studies, and marketing materials. For example, we might publish that "the average strategy in our dataset has a Sharpe ratio of X" based on aggregated data across all users. This data cannot be traced back to you or your specific strategies. The full scope of this license is set out in our Terms of Service.

---

Data Storage and Security

Where We Store Data AlgoChef is operated from Canada. Your data is stored on secure servers provided by our infrastructure partners (primarily Supabase and Vercel). Data may be hosted in Canadian, US, or EU regions depending on the service.

How We Protect Data

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Access controls and authentication
• Regular security assessments
• Secure backup procedures

Data Retention

• Account data: Retained while your account is active and for 30 days after deletion request
• Strategy data: Retained while your account is active; deleted within 30 days of account deletion
• Analytics data: Retained in anonymized form indefinitely

Personal Data Breach Notification (GDPR Art. 33 & 34)

In the event of a personal data breach that affects EU/EEA/UK users, we will notify the competent supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly and without undue delay, consistent with GDPR Article 34.

---

Sharing Your Information

We do not sell your personal information. We may share your information only in these limited circumstances:

Service Providers (Subprocessors) We use the following third-party subprocessors to operate the Service. Each is bound by a data processing agreement (DPA) and only accesses the data necessary to perform their specific function:

We maintain this list current and will notify users of material changes (e.g., adding a new subprocessor with access to personal data) at least 30 days in advance where required by GDPR.

Legal Requirements We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights or property
• Prevent fraud or security issues
• Protect the safety of users or the public

Business Transfers If AlgoChef is acquired, merged, or sells assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

---

Your Rights and Choices

Access and Portability You can request a copy of your personal data at any time by contacting us.

Correction You can update your account information through your account settings or by contacting us.

Deletion You can request deletion of your account and associated data by contacting us at support@algochef.app. We will process your request within 30 days.

Marketing Opt-Out You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any email or by contacting us. Note that you may still receive transactional emails about your account.

Cookie Preferences You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect functionality.

For EU/EEA/UK Residents (GDPR) If you are in the European Union, European Economic Area, or United Kingdom, you have the following rights under GDPR Chapter 3:

• Right to access (Art. 15) — request a copy of the personal data we hold about you
• Right to rectification (Art. 16) — correct inaccurate or incomplete personal data
• Right to erasure / "right to be forgotten" (Art. 17)
• Right to restrict processing (Art. 18)
• Right to data portability (Art. 20) — receive your data in a structured, commonly used, machine-readable format
• Right to object to processing based on legitimate interest or direct marketing (Art. 21)
• Right to withdraw consent at any time (Art. 7(3))
• Right to lodge a complaint with your local supervisory authority (Art. 77)

To exercise these rights, contact us at privacy@algochef.app. We will respond within 30 days, as required by GDPR Article 12, and will not charge a fee unless your request is manifestly unfounded or excessive.

For California Residents (CCPA) California residents have the right to:

• Know what personal information is collected
• Know whether personal information is sold or disclosed
• Say no to the sale of personal information
• Access your personal information
• Equal service and price, even after exercising privacy rights

We do not sell personal information. To exercise your rights, contact us at support@algochef.app.

---

Cookies and Tracking Technologies

Essential Cookies Required for the website to function. Cannot be disabled.

• Authentication tokens
• Session management
• Security features

Analytics Cookies Help us understand how visitors use our website.

• Pages visited
• Time on site
• Traffic sources

Preference Cookies Remember your settings and preferences.

• Theme preferences
• Display settings

How to Manage Cookies Most browsers allow you to control cookies through settings. Note that disabling cookies may limit functionality.

---

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policy of any website you visit.

---

Children's Privacy

AlgoChef is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

---

International Data Transfers

AlgoChef is operated from Canada. When you use the Service from outside Canada — including from the EU/EEA, United Kingdom, United States, or elsewhere — your personal data is transferred to and processed in Canada and, through our subprocessors, potentially in the United States and the European Union.

For EU/EEA/UK users: The European Commission has issued an adequacy decision for Canada (Commission Decision 2002/2/EC), which recognizes Canadian privacy law (PIPEDA) as providing an adequate level of protection for personal data transferred from the EU to commercial organizations in Canada. Transfers from the EU to AlgoChef in Canada therefore do not require additional safeguards under GDPR Article 45.

Where our subprocessors are located in jurisdictions without an EU adequacy decision (for example, the United States), transfers are governed by the European Commission's Standard Contractual Clauses (SCCs) as approved in Commission Implementing Decision (EU) 2021/914, together with any supplementary measures required by the Schrems II judgment.

By using the Service, you acknowledge and consent to these transfers.

---

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending you an email (for significant changes)

We encourage you to review this policy periodically.

---

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

• General privacy inquiries and GDPR requests: privacy@algochef.app
• General support: support@algochef.app

---

Summary

The short version: We collect what we need to provide our service, we protect your data, and we never sell it.