Privacy Policy

B&K Investment Group LLC ("B&K", "we", "us", "our"), a Michigan limited liability company, operates the SignalForge trading automation platform at signal4ge.com (the "Service"). This page explains what personal data we collect, how we use it, and the choices you have.

Operator: B&K Investment Group LLC, a Michigan limited liability company. Data Protection contact: privacy@signal4ge.com.

Data we collect

• Account data — email, display name, hashed password, OAuth provider identifiers (Google), account creation timestamp.
• Usage data — pages visited, features used, strategy configurations, backtests you run, timestamps and IP address of requests.
• Trading configuration — bots, strategies, risk rules, watchlists, journal entries, and paper-trading balances you create in the app.
• Broker credentials — API keys you connect for exchanges/brokers, stored encrypted at rest. SignalForge never requests withdrawal permissions.
• Billing data — plan, subscription status, billing history. Card data is handled directly by our payment processor (Stripe) and never touches our servers.
• Support communications — messages you send us and our replies.

How we use data

• Operate the Service, sign you in, and personalize your dashboard.
• Execute strategies, run backtests, and record trades against your connected accounts as you configure them.
• Process subscriptions and prevent fraud.
• Detect abuse, debug errors, and improve reliability.
• Send transactional messages (receipts, security alerts, product notifications). Marketing email is opt-in.

Legal bases (EEA/UK visitors)

We process personal data under one or more of: performance of the contract you have with us, our legitimate interest in operating and securing the Service, compliance with legal obligations, or consent (where required, for example non-essential cookies and marketing email).

Sharing

• Infrastructure providers — hosting, database, authentication, and email delivery vendors that process data on our behalf under confidentiality obligations.
• Payments — Stripe processes card details directly; we receive only tokens and billing metadata.
• Exchanges and brokers — only when you explicitly connect an account, and only the credentials/instructions needed to place orders you initiate.
• Legal — when required by law, regulation, subpoena, or to protect our rights.
• We do not sell your personal data.

Retention

Account, trading configuration, and billing records are retained while your account is active and for a limited period after deletion for legal and anti-fraud purposes. You can request deletion at any time from Settings → Delete account or by contacting us.

Security

We use industry-standard controls including encryption in transit, encrypted storage of broker credentials, scoped database access with row-level security, and audit logs for sensitive actions. No system is perfectly secure — please use a strong, unique password.

Your rights (GDPR / UK GDPR)

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to processing based on legitimate interests, to withdraw consent, and to lodge a complaint with a supervisory authority. Contact us to exercise these rights; we respond within 30 days.

Your California privacy rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion or correction, to opt out of the "sale" or "sharing" of personal information, to limit use of sensitive personal information, and to non-discrimination for exercising these rights.

• We do not sell or share personal information for cross-context behavioural advertising, and we have not done so in the preceding 12 months.
• We do not knowingly collect personal information of consumers under 16.
• We honour the Global Privacy Control (GPC) browser signal as an opt-out of sale/sharing.
• To exercise your rights, email privacy@signal4ge.com or use the Delete account control in Settings. We may verify your identity via your account email.
• You may designate an authorised agent by providing signed written permission and verifying your identity.

Cookies

We use strictly necessary cookies for sign-in and app preferences, and Google Analytics 4 (with IP anonymisation and Consent Mode v2) which loads only after you accept the cookie banner. We do not run advertising cookies. See our full Cookie Policy.

Children

The Service is not directed to anyone under 18.

Changes

We will post updates on this page and, for material changes, notify you in the app or by email.

Contact

Questions or requests: privacy@signal4ge.com.