Privacy Policy

Effective date: July 10, 2026

This Privacy Policy describes how Perseus Labs ("we", "us", "our") collects, uses, and protects information in connection with Rheos ("the Platform"). By using the Platform you agree to the practices described here.

1. Information We Collect

Account data: email address, username, and hashed password when you register.
Profile data: risk tolerance, strategy preferences, timezone, and notification settings you configure.
Broker credentials: API keys and secrets you connect. These are stored exclusively in AES-256-GCM encrypted form and are never readable by our staff.
Trade data: positions, signals, and P&L generated by the bot on your behalf.
Usage data: session timestamps and last-login time for security purposes.

2. How We Use Your Information

To authenticate your account and maintain your session securely.
To execute paper or live trades according to your configured strategy.
To display portfolio analytics, signal history, and performance data.
To send notifications you have opted in to.
To detect and prevent unauthorized access.

3. Data Storage & Security

All data is stored in a MySQL database on Hostinger infrastructure. Broker API keys are encrypted with AES-256-GCM before storage. Passwords are hashed using bcrypt with cost factor 12. Session tokens are HS256 JWTs stored in httpOnly, SameSite=Strict cookies.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

Broker and market data APIs: services you connect or Rheos uses for market data and trade execution, including Alpaca Markets where enabled. These services are subject to their own privacy policies.
Hostinger: hosting and database provider.

5. Data Retention

Your account data is retained as long as your account remains active. You may request deletion by contacting us at info@perseusja.com. Trade history is retained for a minimum of 12 months for regulatory purposes.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting info@perseusja.com. We will respond within 5 business days.

7. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page reflects the most recent revision. Continued use of the Platform after a revision constitutes acceptance of the updated policy.

8. Contact

Perseus Labs — info@perseusja.com