Security & privacy

The security of your data, by design.

Judgebot analyzes your robots in read-only mode: no orders placed, no broker password requested, no data resold. This page explains precisely how we protect your account and your information.

Read-only access TLS encryption GDPR compliant

Four founding principles

Protecting your account and your data comes before any other consideration.

Read-only access

Judgebot reads your performance. No order is ever sent to your broker.

No broker credentials

Neither a password nor investor access is ever requested from you.

End-to-end encryption

Your data is encrypted in transit (TLS) and at rest with our hosts.

Outsourced payments

Billing is handled by Stripe. Judgebot stores no card data.

Strictly read-only access

Judgebot never connects to your broker. A lightweight component, installed on your MT4/MT5 terminal, transmits only your account performance metrics. The flow is one-way: data goes out, no instruction comes in.

  • The component reads performance, never your credentials
  • Noorder-execution capability exists on Judgebot’s side
  • Transmission over a connection encrypted (TLS)
Data flow
MT4/MT5 accountread-only
TLS / HTTPSencrypted
Judgebotanalysis
Your dashboardprivate
Flow one-way : performance goes out, no order comes in.
Our commitments

What Judgebot will never do

Access your funds

Judgebot places no orders and has no access to your capital or your positions.

Ask for your credentials

No password or investor access to your broker will ever be requested from you.

Resell your data

Your data is neither sold nor shared for commercial purposes, without exception.

Infrastructure

Hosting and sub-processors

We rely on a small number of established providers, strictly to run the service.

ProviderRoleData involved
VercelApplication hostingApplication traffic
SupabaseDatabaseAccount and performance (encrypted at rest)
StripePayment processingBilling — PCI-DSS Level 1 certified
ResendTransactional emailsEmail address
TelegramAlert notifications (optional)Enabled at your initiative

This list constitutes all of our sub-processors. We do not pass your data to any other third party.

Governance

The lifecycle of your data

Minimal collection

We collect only the data necessary to analyze and monitor your robots.

Limited retention

Your data is kept for as long as the service requires, then is no longer meant to be used.

Deletion on request

When you close your account or on simple request, your data is deleted.

Compliance

Your rights over your data

In accordance with the General Data Protection Regulation, you have the following rights at all times.

Access

Obtain a copy of the personal data we hold about you.

Rectification

Have any inaccurate or incomplete information corrected.

Erasure

Request deletion of your account and your data.

Portability

Retrieve your data in a structured, reusable format.

Nothing is public by default

Neither your account, your performance, nor your reports are visible without your explicit decision. Publishing a track record is a voluntary action, revocable at any time.

Report a vulnerability

Security is ongoing work. If you identify a potential flaw, contact our team: we review every report seriously and diligently.

infos@judgebot.io
FAQ

Security questions

Can Judgebot place orders on my account?
No, never. Judgebot reads your performance data in read-only mode and has no order-execution mechanism whatsoever.
Do you ask for my broker password?
Never. We ask for neither your password nor investor access to your trading account.
Where is my data hosted?
On managed cloud infrastructure (Vercel, Supabase), with encryption in transit and at rest. The full list of our sub-processors is shown above.
Is my data sold or shared?
No. Your data is neither sold nor shared for commercial purposes. It only passes through the sub-processors necessary for the service.
How can I delete my data?
You can request deletion of your account and all your data at any time, from your account area or on simple request.
How are payments secured?
Billing is entirely handled by Stripe, PCI-DSS Level 1 certified. Judgebot stores no bank card data.

Analyze your robot with confidence

Free, in 60 seconds, no credit card — and without ever exposing your trading account.