Home / Data Security
How We Protect Your Broker Data
Last updated:
Connecting a broker means trusting us with access to your account data. This is how we handle it.
How we connect
We connect only through each broker's official API. For most brokers you use the API key and secret from your own broker developer app, and you log in on your broker's own page; we never see your broker password. Angel One and Firstock have no separate developer-app login, so for those two you enter your login details once. We use them only to start the session and do not store them.
We read, we never trade
ApexDelta reads your positions, holdings, orders, trades and funds. It does not place, modify or cancel orders.
How we store your keys
- API keys, secrets and access tokens are encrypted before they are stored.
- They are decrypted only in our server's memory, at the moment we fetch your data from your broker.
- They are never written to logs and never shown to our staff on any screen.
- All data travels over HTTPS.
Disconnecting
You can disconnect a broker at any time in Settings, and we delete its access token straight away. When you delete your account, we delete all of your stored credentials.
Report a security issue
Email hello@apexdeltaventures.com. We will reply within 48 hours.