1. Purpose of This Page
This page gives a customer-facing, high-level summary of how SIPSALGO protects your information. It is not a technical architecture document and does not disclose secrets, connection strings, internal tokens, or exploit-relevant operational detail.
2. Customer/Workspace Segregation
SIPS data is organised by workspace, so your strategies, portfolios and account information are kept logically separate from other customers’ data.
3. Server-Side Credential Handling
Sensitive credentials used by SIPS (such as database connection details) are handled entirely server-side and are never exposed to the browser or embedded in customer-facing code.
4. Private Storage
Files you upload to SIPS (such as strategy or dataset files) are held in private storage, not publicly accessible.
5. Encrypted Transport
Connections to the SIPSALGO website and platform use encrypted HTTPS transport.
6. Database Security and Access Controls
SIPS data is held in a managed, access-controlled database (Supabase), with row-level access controls applied to relevant tables so that data is only reachable by the party it belongs to or by SIPS’s own trusted server-side systems.
7. MT5 Connector Credential Security
Where you connect an MT5 account, the SIPS Bridge/Connector is provisioned with credentials specific to that connection. Connector secrets are handled securely and are not exposed to other customers.
8. Read-Only Live Monitoring
Current MT5 live-monitoring functionality is read-only: SIPS receives and displays account/trade/performance information, and the SIPS Bridge does not place, modify or execute trades. See the Software & Trading Risk Disclosure for full detail.
9. Backups and Availability
Our infrastructure providers maintain their own standard backup and availability practices for the services SIPS runs on. We do not promise a specific recovery time or uptime figure beyond what is genuinely supported by that infrastructure.
10. Your Own Security Responsibilities
- keep your account credentials confidential and secure
- tell us promptly if you suspect unauthorised access to your account
- keep the credentials/devices you use to access SIPS reasonably secure
11. Reporting a Security Concern
Report a suspected security issue to hello@sipsalgo.com.