Privacy Policy

At HighAlphaTrading, we hold user confidentiality and security to the highest standard. This Privacy Policy details our practices concerning the collection, storage, utilization, and safeguarding of information when you interact with our platform and automated software services.

By accessing or utilizing HighAlphaTrading, you acknowledge and agree to the information practices described herein.

To enable operational integrity and secure execution, we collect and process the following categories of information:

• Account Credentials: Full name or display alias, email address, salted and securely hashed password (via industry-leading Argon2id algorithms; passwords are never stored in plaintext), and optional referral linkage.
• Financial & Transactional Records: USDT deposit telemetry, recipient blockchain wallet addresses for withdrawals, transaction hashes (TXIDs), strategy allocation records, and affiliate commission history.
• Telemetry & Security Data: Originating IP address, login timestamp logs, browser identification, session identifiers, and two-factor authentication configuration keys.

Collected information is utilized strictly to fulfill the following purposes:

• Authenticate your identity and maintain secure user sessions.
• Facilitate strategy allocation to algorithmic trading bots and calculate real-time equity and ROI metrics.
• Verify and process deposits and withdrawals, including verification code authorization.
• Detect, mitigate, and prevent fraudulent actions, brute-force attempts, or network intrusions.
• Provide responsive customer support and ticket resolutions.

HighAlphaTrading deploys strictly functional and security-related session storage mechanisms:

• HATSESSID: Secure, HttpOnly, SameSite cookie utilized solely to maintain authenticated user sessions.
• HATADMINSESSID: Administrative authentication cookie.
• CSRF Protection Tokens: Cryptographic tokens preventing cross-site request forgery.
• Local Preferences: Storage of user interface preferences such as chosen language and display theme.

We do not utilize third-party cross-site advertising cookies or behavioral remarketing trackers.

Information may only be disclosed if strictly mandated by binding judicial orders or applicable regulatory compliance obligations.

Our infrastructure incorporates robust technical and organizational countermeasures:

• End-to-End Transport Encryption: Mandatory TLS/HTTPS encryption across all data paths.
• Credential Hashing: State-of-the-art Argon2id cryptographic hashing with unique salt vectors.
• Multi-Factor Authentication: RFC 6238 TOTP (Google Authenticator) enforcement capability.
• SQL Injection Prevention: Parameterized PDO queries isolating database transactions.

We retain user information for as long as your account remains open and operational. Historical transaction logs and blockchain references are preserved in accordance with regulatory compliance and technical audit requirements.

Subject to applicable law, users maintain the right to:

• Access, review, or update their registered profile details and passwords.
• Enable email masking directly within account settings to obfuscate email display.
• Request formal account deactivation and data purging, subject to legally mandated financial audit retention limits.

If you have questions regarding this Privacy Policy or wish to exercise data rights, please contact our data protection team at:

• Contact & Privacy Support: contact@highalphatrading.com