Transparency & Privacy

Privacy Policy

Last updated & effective: October 2026 | Version 4.1

Backpulse ("we", "us", or "our") is an independent quantitative trading software project operating the backpulse.io platform and the Backpulse Browser Extension (for Chrome and Firefox). We are committed to transparency, data minimization, and protecting the privacy of our users. This Privacy Policy explains what information we collect, how it is handled, and your rights.

1. About Backpulse & Scope of this Policy

Backpulse is an independent software tool developed to assist algorithmic and discretionary traders with TradingView strategy parameter backtesting, optimization, and webhook signal execution. We operate the website at backpulse.io and associated browser extensions.

Startup Notice: Backpulse is operated as an independent software initiative. We are not a corporate bank, financial institution, custodial cryptocurrency exchange, broker-dealer, or financial advisory firm. We do not hold client funds, manage pooled assets, or provide individualized investment advice.

This Privacy Policy applies to your use of our website (backpulse.io), the Backpulse Browser Extension, and our webhook API bridge.

2. Independent Relationship with TradingView (Disclaimer)

TRADEMARK & INDEPENDENT THIRD-PARTY NOTICE

Backpulse is an independent third-party product and is NOT affiliated with, sponsored by, certified, or endorsed by TradingView, Inc. 'TradingView' is a registered trademark of TradingView, Inc. (www.tradingview.com).

Backpulse operates as a productivity companion for users who have their own active accounts on TradingView. When you use Backpulse alongside TradingView, you remain subject to TradingView's Terms of Use and Privacy Policy.

We do not claim any ownership of TradingView technology, charts, or proprietary data feeds. Backpulse merely automates user interactions that a trader would otherwise perform manually on their own browser.

3. Browser Extension Privacy & Local Processing

CLIENT-SIDE PROCESSING FIRST

Backtest parameter permutations executed via the Backpulse Extension run locally in your browser. Your Pine Script strategy source code is never scraped, collected, or sold to third-party market makers or brokers.

The Backpulse Extension (available for Google Chrome and Mozilla Firefox) is engineered strictly under the Single Purpose and Minimal Permissions guidelines of browser extension marketplaces:

Permissions Breakdown & Why They Are Needed

activeTab & scripting: Only used when you are on tradingview.com. Allows the extension to interact with strategy input fields and read backtest result tables (Net Profit, Sharpe, Max Drawdown) on your active chart tab, exactly as you would click manually.
storage (chrome.storage.local): Stores your optimizer settings, dark/light theme preference, and your Backpulse authentication token locally on your computer. This data never leaves your device unless explicitly synced to your account.
cookies: Allows the extension to verify your active session on tradingview.com to support automated test runs without repeatedly asking you to sign in. TradingView session cookies are never sold or shared with any third party.
Zero Cross-Site Tracking: The extension has no access to and never monitors, reads, or intercepts your browsing history on any websites other than authorized TradingView chart pages.

4. Information We Collect

We follow a strict principle of data minimization, collecting only what is necessary to run our service reliably:

A. Information You Provide Directly

Account Details: When you register, we collect your email address and display name. Passwords are never stored in plaintext and are securely hashed using bcrypt/Argon2id.
Google Sign-In: If you choose to log in with Google, we receive your verified email, display name, and avatar URL via standard OAuth 2.0.
Webhook & Bot Config: Your configured webhook route names, target exchanges, and signal format templates.
Communications: Messages you send directly to our support or feedback channels.

B. Technical & Operational Logs

IP Address & Diagnostic Logs: Recorded temporarily for rate limiting, DDoS mitigation, and server security.
Execution Telemetry: Timestamps, signal order action (e.g. BUY/SELL), and delivery confirmation status to verify that webhook signals reached your connected exchange.

C. Information We NEVER Collect

Cryptocurrency private keys, recovery seed phrases, or wallet passwords.
Exchange withdrawal permissions (our system strictly rejects keys with withdrawal rights).
Full credit or debit card numbers (payments are handled entirely by our payment gateway).
Browsing activity outside of backpulse.io and tradingview.com.

5. Non-Custodial Architecture & Exchange API Keys

ZERO-WITHDRAWAL POLICY

You must NEVER enable withdrawal permissions on API keys connected to Backpulse. Our system automatically validates API credentials and immediately rejects any key that permits fund withdrawals.

Non-Custodial Architecture: All crypto assets, cash balances, and margin remain 100% in your own personal accounts on supported exchanges (Binance, Bybit, OKX, Bitget, etc.). Backpulse never holds custody of your funds.

API Key Encryption: Exchange API keys and secrets are encrypted in transit via TLS 1.3 and stored using industry-standard AES-256-GCM encryption. They are decrypted in volatile memory solely to execute your trading instructions.

Revocation Control: You can revoke or delete your connected API keys at any time from your Backpulse account dashboard or directly inside your exchange account settings.

6. Payment & Billing Information

Paid subscription plans (Pro, Scale) are processed through our Merchant of Record, Dodo Payments.

Dodo Payments is a PCI-DSS certified payment processor that manages payment card processing, global sales tax, VAT, and invoicing on our behalf.

Backpulse never receives, processes, or stores your full credit card number, CVV code, or banking credentials. We only receive payment confirmation IDs, your active subscription tier, and renewal/expiration timestamps.

7. Third-Party Service Providers

We do NOT sell, rent, or trade your personal data or trading records to data brokers, advertisers, hedge funds, or market makers. Ever.

We rely on trusted cloud infrastructure partners to keep our services fast, secure, and resilient:

Sub-Processor	Processing Role & Activity	Data Center Region
MongoDB Atlas	Encrypted database storage & managed backups	EU / US
Cloudflare	Edge networking, CDN, DDoS protection & TLS encryption	Global Edge Network
Dodo Payments	Merchant of Record for secure payment processing, tax & billing	Global / USA
Google Cloud Platform	Microservices hosting, fast webhook ingestion	EU (Frankfurt)

We will only disclose user information to legal authorities if required by an enforceable, legally binding court order or subpoena from a competent jurisdiction.

8. Data Retention & Account Deletion Policy

We retain your data only for as long as your account remains active or as needed to provide our services.

Built-in Self-Service Deletion: You can deactivate or permanently delete your account and all associated data at any time directly in your Account Settings under the Danger Zone:

Immediate Permanent Purge: Instantly wipes all your account records, connected exchange API credentials, bot configurations, and webhook logs permanently. This action cannot be reversed.
30-Day Scheduled Deletion: Immediately deactivates your account and revokes external connections, with complete cryptographic purging after a 30-day grace period.
Backup Rotations: Encrypted operational backups are automatically purged over standard 90-day retention cycles.

9. Your Rights & Choices

Regardless of your location, we believe you should have complete control over your personal data:

Access & Portability: You can view your account profile and export your backtest history and signal logs at any time.
Correction: You can update your profile name and details whenever you want.
Deletion: You can request or perform complete deletion of your account and credentials.
Disconnect Integrations: You can unlink TradingView sessions, remove Telegram bots, and delete exchange API keys with one click.
No Discrimination: We will never discriminate against you, throttle your bandwidth, or charge you extra for exercising your privacy rights.

To submit a privacy inquiry or data request, simply email us at [email protected]. We reply to all inquiries promptly.

10. Cookies & Tracking Technologies

Essential Cookies: Required to keep you securely signed in (JWT auth session) and remember your visual preferences (theme, language). These cannot be disabled as the site cannot function without them.

Zero Third-Party Advertising Trackers: We do not use third-party behavioral advertising networks or sell tracking profiles to ad brokers.

You can clear or block cookies at any time through your browser settings, though doing so will log you out of your account.

11. Financial Risk & Trading Disclaimer

Software Tool Only: Backpulse provides quantitative analysis software and webhook routing tools. We do NOT provide financial, investment, legal, or tax advice.

Trading Risk: Trading cryptocurrencies, futures, and financial derivatives involves significant risk of capital loss. Automated strategies and backtested results represent historical simulations and are never guarantees of future profits.

You are exclusively responsible for your own trading decisions, risk parameters, leverage management, and exchange account security.

12. Contact & Inquiries

If you have any questions, feedback, or data privacy requests regarding this Privacy Policy, please reach out to us:

Backpulse Team Email: [email protected] Website: https://backpulse.io We aim to respond to all inquiries within 24 to 48 hours.

Privacy & Support

Backpulse Privacy & Developer Team

For questions about our privacy practices, account deletion, or data requests, contact our team directly at: [email protected]. We are an independent software team and respond to all inquiries within 24–48 hours.