security

Your funds stay on your exchange. OptAlgo only trades.

No deposits, no withdrawal permissions, no AI with live keys. This page lists what OptAlgo can and cannot do with your account, and what limits the server enforces.

Official Binance broker · Non-custodial · Live only when you confirm

sample data

01

Non-custodial by design

OptAlgo never holds your crypto. You connect an exchange API key that can trade but cannot withdraw. Binance auto-connect uses Binance's own consent screen and creates an IP-restricted key. API secrets are stored hashed and encrypted; they are never shown again after you save them.

02

The AI never holds live keys

Chat connectors for Claude.ai and ChatGPT are paper-only and cannot place live orders. API keys for Claude Code, Codex and your own programs carry scopes you choose and limits the server enforces: maximum allocation, maximum leverage and a daily loss cap. Live trading on a hosted strategy requires your confirmation in the app.

03

Strategies run in a sandbox

Hosted strategy code runs at every bar close inside a sandboxed runner with no file, network or process access. It can only read candles and emit the signal the SDK allows. Every run is deterministic and checksummed, so what you backtested is what trades.

04

Accounts, billing and the company

Billing is handled by Stripe; OptAlgo never sees your card number. Sub-accounts let you ring-fence bot capital with its own exchange connection. OptAlgo is operated by FreedX Technologies OÜ, an Estonian company, running bots since 2021.

faq

Security FAQ

Can OptAlgo withdraw my funds?

No. API-key connections never need withdrawal permission, and Binance auto-connect creates a key without it. Funds stay on your exchange.

What happens if OptAlgo goes down while a bot is live?

Open positions and exchange-side stop orders stay on the exchange. Execution resumes from the exchange's own order state when the service is back; positions are reconciled, not re-entered.

Can my AI assistant place a live trade?

Chat connectors cannot. Terminal agents can only through an API key with a live scope you created, inside the allocation, leverage and daily-loss limits you set, and hosted strategies go live only after you confirm.

How do I report a security issue?

Email [email protected] with the details. Please do not post it publicly before we have had a chance to respond.

Connect an exchange the safe way.

Start free, no card

50 backtest units a month on the Free plan.