Effective date: May 23, 2026
Botfolio ("we", "our", "us", or "Botfolio") is operated by Alejandro Verdin, an individual sole proprietor doing business as Botfolio, located at 1500 Lincoln Street, North Chicago, Illinois 60064, United States. We operate the website trybotfolio.comand the associated Botfolio platform (the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect information when you use the Service.
When you connect an Alpaca account, you grant Botfolio authority to read account information and, if you deploy a bot to that account, to place orders on your behalf in accordance with the strategy you configured. Credentials are encrypted at rest using authenticated encryption. We never share your Alpaca credentials with third parties. You can revoke our access at any time by deleting the API key from your Alpaca dashboard, by disconnecting the OAuth grant from your Alpaca account settings, or by removing the credentials from your Botfolio account.
Botfolio supports both Alpaca paper trading and Alpaca live trading. Live trading is opt-in: a bot will not place live orders unless you explicitly configure it for a live Alpaca account and deploy it. You are responsible for the configuration and the consequences of every bot you deploy.
Botfolio uses third-party large language model (LLM) providers — currently DeepSeek, Google (Gemini), and OpenAI — to convert your plain-English strategy descriptions into structured bot configurations, to analyze trades, and to power other AI-assisted features. When you use these features, the text you submit, along with related context (such as recent trade history or strategy parameters relevant to the request), is transmitted to the selected provider and processed under that provider's terms. We do not knowingly send your Alpaca credentials, plaintext passwords, or payment card data to any LLM provider.
We rely on the following processors to operate the Service. Each one processes only the data necessary for its function and is bound by its own terms and privacy policy:
We do not sell, rent, or trade your personal information. We share data only:
Botfolio operates servers and uses processors primarily located in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service you consent to that transfer.
We use industry-standard practices to protect your data. All web traffic is served over HTTPS. Alpaca credentials are encrypted at rest using authenticated symmetric encryption with a key stored outside the database. Passwords are hashed using a modern key-derivation function. Database access is restricted to the Service and its operators. No system is completely secure; we cannot guarantee absolute security and you use the Service at your own risk.
We retain account data while your account is active. You may request deletion of your account and associated personal data at any time by emailing [email protected]. We will delete or anonymize your personal data within 30 days of a valid request, except where retention is required by law, by our financial or tax record-keeping obligations, or for the resolution of disputes. Aggregated, anonymized performance data may be retained indefinitely.
You may access, correct, export, or delete your personal data at any time by contacting [email protected]. If you are a resident of the European Union, the United Kingdom, or the European Economic Area, you have additional rights under the GDPR, including the right to data portability and the right to object to or restrict processing. If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right not to be discriminated against for exercising these rights. We do not sell personal information as defined under the CCPA.
We use first-party session cookies to keep you logged in and remember preferences. We use PostHog for product analytics and Sentry for error monitoring. We do not use third-party advertising cookies and we do not participate in cross-site behavioral advertising.
Botfolio is not directed to and is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it.
We may update this Privacy Policy from time to time. Material changes will be announced by email or by an in-app notice at least 14 days before they take effect. Continued use of the Service after the effective date of an updated policy constitutes acceptance of the updated terms.
Privacy inquiries: [email protected]
General support: [email protected]
Mailing address: Alejandro Verdin, dba Botfolio, 1500 Lincoln Street, North Chicago, IL 60064, USA