Privacy Policy
Owner and access
WT Strategies is one sole-hosted installation owned and operated by James Williams on the Owner’s own hardware, for the Owner’s own accounts. Access is family-only. A Viewer may be invited only with James Williams’s written consent on file. Viewer access is read-only and limited to delayed or last-close information, with no trading authority or access to broker keys. Users (other traders) are not currently offered; their invitation flow is disabled. The software is not distributed.
Information processed
The installation processes the Owner’s and invited family Viewers’ information as needed for their roles:
- Account email address, role, invitation and written-consent records.
- Client IP address, user agent, device class and a one-way session hash in security and action records.
- The Owner’s phone number and SMS consent evidence if SMS is enabled and the Owner opts in. Viewers do not receive SMS alerts.
- Sign-in and action audit records, including MFA results, request paths, unusual-sign-in baseline, alert ledger entries, masked sender numbers, acknowledgements and the append-only legal acceptance ledger.
- Trading and order records from James Williams’s own Alpaca accounts and LIVE environment.
- Reports or exports permitted by role, and encrypted backups made by James Williams.
- Technical request information processed by Cloudflare when it provides edge, Access or Pages services.
Retention
James Williams controls local retention and backups. Draft retention periods are: account and role records until account deletion plus 30 days; audit and security records for 1 year; legal acceptance ledger for 7 years; trading records for 7 years; exports for 30 days; backups for 90 days; alert ledger records for 1 year; SMS logs for 1 year; Cloudflare request logs according to Cloudflare’s own retention policy (see the Cloudflare Privacy Policy, Data retention). Closed alert-episode receipts are retained 30 days; open episodes remain until resolved. API-usage ledger records are retained 8 days. The legal acceptance ledger is designed to be append-only, with no in-place editing or deletion of entries during its retention period. These draft periods require attorney review before publication.
Service providers
- Alpaca provides brokerage and market data for James Williams’s own accounts under the Owner’s own agreements and subscription.
- Cloudflare may provide edge protection, Access sign-in and static Pages hosting. Cloudflare terminates TLS and can see app traffic. The target architecture encrypts broker keys for the Owner’s LIVE vault so relays cannot read them.
- Twilio may deliver SMS from James Williams’s own account after setup is complete and the Owner opts in.
Mobile information, including phone numbers and SMS consent, is not shared with or sold to third parties or affiliates for marketing or promotional purposes.
Sign-in and recovery
Sign-in uses a verified email. A passkey is required at enrollment and is the primary sign-in method; an authenticator-app code (TOTP) is the fallback. The platform does not use passwords. Recovery uses the app’s supported recovery flow and does not give a Viewer trading authority or access to broker keys.
SMS
SMS is used for account and trading alerts and a one-time phone-number verification code during SMS opt-in. The verification code confirms the phone number; it is never used for sign-in or MFA. The in-app SMS consent box and consent record are supplied by the SMS opt-in feature when deployed; this public page does not collect consent. SMS alerts are not active yet. The SMS sender number will be published here before SMS alerts are enabled; Twilio setup is pending. When enabled, messages will come from James Williams’s own Twilio account and number. See the SMS Terms.
Contact
Privacy questions: support@wt-strategies.com. Provider: James Williams (individual). Postal address available on request at support@wt-strategies.com.