# PRIVACY POLICY — Korsakov Financial Analytics
*Last updated: April 4, 2026*
Korsakov Financial Analytics ("the Extension") is a Chrome browser extension that provides trading analytics for IQ Option's traderoom. This policy describes how we collect, use, and protect your information.
---
## 1. INFORMATION WE COLLECT
### 1.1 Data Collected Automatically
- **Market data:** Price candles, asset information, and trading mood data intercepted from IQ Option's WebSocket connection while the extension is active.
- **Trading session metrics:** Win/loss counts, win rate, profit/loss amounts, and trade timestamps during active bot sessions.
- **Account type indicator:** Whether you are using a "real" or "practice" account (no account credentials are collected).
### 1.2 Data You Provide
- **Login credentials for Korsakov API:** Email and password used to authenticate with our analytics backend (api.iqkorsakov.com). These are transmitted securely and stored as hashed values.
- **Bot configuration:** Strategy type, duration, risk settings, and asset selections.
### 1.3 Data We Do NOT Collect
- IQ Option account credentials (username, password, or tokens)
- Personal financial information (bank accounts, payment methods)
- Browsing history outside of IQ Option's traderoom
- Personal identification documents
- Data from any website other than iqoption.com/traderoom
---
## 2. HOW WE USE YOUR DATA
All data processing serves one purpose: providing you with trading analytics and automated signals.
- **Technical analysis:** Market data is sent to our API to calculate indicators (RSI, MACD, Bollinger, etc.) and generate composite trading signals.
- **Risk management:** Session metrics are used to enforce daily loss limits, drawdown protection, and position sizing.
- **Strategy optimization:** Historical session data is used to recommend bot configurations and calibrate parameters.
- **Local preferences:** Bot configuration and UI settings are stored in Chrome's local storage for persistence between sessions.
---
## 3. DATA STORAGE AND SECURITY
- **Backend API:** Session data and trade metrics are stored on our secured server (api.iqkorsakov.com) hosted on DigitalOcean, using MongoDB with authentication enabled.
- **Local storage:** User preferences (strategy type, risk level, UI state) are stored in Chrome's localStorage. No sensitive data is stored locally.
- **Transmission:** All communication between the extension and our API uses HTTPS encryption.
- **Passwords:** API account passwords are hashed using bcrypt with 12 salt rounds. We never store plaintext passwords.
- **JWT tokens:** Authentication tokens expire after 7 days and are stored only in the extension's memory.
---
## 4. DATA SHARING
We do **NOT** sell, trade, or share your data with any third parties.
- Your data is only transmitted between the Chrome extension and our own API (api.iqkorsakov.com).
- No analytics services (Google Analytics, Mixpanel, etc.) are integrated.
- No advertising networks receive any data.
- No data is shared with IQ Option or any broker.
---
## 5. DATA RETENTION
- **Active sessions:** Retained while in use and for 90 days after completion for historical analysis.
- **Trade history:** Retained for up to 1 year for strategy optimization.
- **Account data:** Retained until you request deletion.
- **Local storage:** Cleared when you uninstall the extension or clear browser data.
---
## 6. YOUR RIGHTS
You have the right to:
- **Access:** Request a copy of all data associated with your account.
- **Deletion:** Request complete deletion of your account and all associated data.
- **Portability:** Request your data in a machine-readable format.
- **Opt-out:** Stop using the extension at any time by uninstalling it.
To exercise these rights, contact us at achurycompany@gmail.com.
---
## 7. PERMISSIONS JUSTIFICATION
- **activeTab:** Inject the analytics sidebar into IQ Option's traderoom page only.
- **storage:** Save user preferences (bot config, risk settings, UI state) locally.
- **host (api.iqkorsakov.com):** Communicate with our backend API for signal processing and analytics.
---
## 8. CHILDREN'S PRIVACY
This extension is not intended for anyone under 18 years of age. We do not knowingly collect data from minors. Trading in financial markets requires legal adult status.
---
## 9. CHANGES TO THIS POLICY
We may update this policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the extension after changes constitutes acceptance of the updated policy.
---