Account and policies
Security and data: what Edgoro stores
Edgoro stores your account, your creations (prompts, answers and chart screenshots), your plan and payment records, and the data of the options you use. It never asks for and has no place to store broker logins, MetaTrader passwords or exchange API keys, and Stripe handles card numbers. Prompts and screenshots are processed by Anthropic's Claude models through OpenRouter, set to route only to providers that don't store your content or train on it. You can export your data as JSON or delete your account from Settings.
On this page
Sign-in
- Authentication runs on Convex Auth, with no password: Google sign-in, or a 6-digit code emailed to you (through Resend), valid for 10 minutes.
- At most 5 codes are sent to one address per hour, and sign-in attempts are limited to 8 failures per hour.
- A session lasts 30 days at most and ends after 14 days without activity, in secure, HTTP-only cookies.
- An email address that Google hasn't verified never links to an existing account.
What Edgoro stores
In its database (Convex):
- Account: your email address, and your name and profile picture if you sign in with Google.
- Profile: your plan, Stripe customer and subscription identifiers and status, your onboarding answers (goal, market, style, experience, platform) and, with the Prop Firm Pack, your challenge rules.
- Creations: your messages, the answers with their code, and the chart screenshots you upload (in file storage).
- Payments: amounts, currency, dates and the Stripe Checkout reference.
- Backtest Lab: each run's settings, extracted rules, results and advice.
- Copilot: your webhook secret, linked Telegram chat, the identifiers of connected apps, remembered facts, price alerts and the activity log.
- Support: questions to the support assistant with its answers, and contact form messages.
Rate limits on public pages use a hash of your IP address rather than the address itself.
What Edgoro never stores
- Card numbers: Stripe collects them directly.
- Broker and MetaTrader credentials: Edgoro never connects to a broker. Expert Advisors run in your own MetaTrader 5.
- Exchange API keys: Python bots read them from a
.envfile on your machine, and Copilot never asks for them. - App tokens for Google Sheets, Notion and Google Calendar: Copilot connects them through Composio's OAuth, which holds the tokens.
- Compiled files: the compile service deletes the temporary source, its log and the compiled .ex5 after each check.
AI processing
Every AI feature (the builders, chart analysis, Backtest Lab's rule extraction and advice, Copilot, the support assistant and the free AI tools) calls Anthropic's Claude through OpenRouter; the default model in the code is Claude Haiku 5.5, and no other model family is used as a fallback. Each request asks OpenRouter to route only to providers that neither store prompts nor train on them. A builder request sends your message, any screenshot and up to the 12 previous messages of the conversation.
Keep personal and confidential information out of prompts and screenshots: crop out account numbers, balances and names.
Providers, export and deletion
The Privacy Policy lists the providers that process personal data (Convex, Vercel, OpenRouter, Google, Stripe, Resend and Sentry), where, and for how long data is kept. Copilot's optional app connections also go through Composio, and its alerts through Telegram's bot API. The site uses only strictly necessary cookies (Cookie Policy).
In Settings you can download your profile, creations, payments, backtests, Copilot history and review as a JSON file, or delete your account, which removes it and its content from the active systems.
Related pages
Trading involves substantial risk of loss and is not suitable for every investor. Edgoro is a software tool, not a broker or financial adviser: nothing it produces is investment advice, and past or backtested performance does not guarantee future results.
Something wrong or missing? Email contact@edgoro.com