CrewParleyTrading
Request Access
Menu

Risk & data

Know the risk. Know what leaves your computer.

These explanations describe the design under development. They do not replace the active Privacy Policy or Terms of Service, and they are not investment advice.

Trading risk

Trading foreign exchange, contracts for difference and other leveraged instruments carries a risk of loss that can exceed your deposit depending on your broker and jurisdiction. CrewParley Trading Agent is software you operate with your own broker account. It is not a broker, an investment adviser, a signal service, a managed account or a guarantee of any outcome.

  • AI briefs, outlooks, signal grades and proposals are generated analysis for your review. They can be wrong, late or based on incomplete data.
  • Risk limits reduce the conditions you configured. They do not remove market gaps, broker execution, slippage, requotes, connectivity failures or errors in your own configuration.
  • Your broker's terms, margin rules and order handling apply. The app reports what MetaTrader reports.

Stored on your computer

Trading commands and their outcomes, the audit log, the journal, calendar data, settings and usage records are stored in local database and settings files. Provider API keys live in the operating-system keychain rather than in files. On macOS the settings and data folders are restricted to your user account; on Windows the profile folders are per user. The files are only as private as your operating-system login.

Local storage is not an erasure promise. Uninstalling the app does not remove MetaTrader's own records, your broker's records or copies in your backups.

What leaves your computer

  • Your AI provider: selected market data, technical summaries, news headlines, calendar entries and your own messages are sent to the provider you configure. Provider retention, training and regions follow that provider's terms and settings, not this site.
  • Feeds and calendars: addresses you type are fetched as plain requests from the public internet. Addresses that point at private or local networks are refused.
  • Update checks: the app checks a release endpoint over HTTPS for signed updates.
  • Accounts and plans: the account service built into the app sends sign-in, plan, subscription and registered-computer records to the CrewParley platform once that service is approved for launch. It is designed to hold no trading data.

MetaTrader and your broker have their own connections and data handling outside this application.

Security model

  • The bridge listens only on your own computer and requires a per-install key compared in constant time. Nothing is exposed to the network.
  • Agents have no trading tools. The executor sizes orders in code and the risk manager checks every order from every source.
  • Feed and news text is treated as untrusted data; text that addresses the model as instructions is set aside before any agent sees it.
  • Updates are signed and the app refuses anything not signed with its built-in public key.
  • The interface runs under a strict content-security policy with no remote scripts and a minimal set of desktop capabilities.
  • Diagnostics show only the last digits of an account number and never include the bridge key.

Report a security concern privately through the app's feedback form or by email to support@buenhoj.com. Do not send credentials, keys or account numbers.