Privacy Policy

Last updated: February 27, 2026

1. Overview

slmaj is a trading bot that runs entirely on your local machine. We have designed the Software with privacy as a core principle. slmaj does not collect, transmit, or store your personal data, trading data, or account information on any server we operate.

This Privacy Policy explains what data exists on your machine when you use the Software, what limited data is exchanged during license verification, and how the slmaj.com website handles visitor information.

2. Data the Bot Handles Locally

The following data is created and stored on your machine when you run slmaj. None of this data is sent to slmaj servers:

  • Configuration files. Your IBKR connection settings, risk parameters, and trading preferences are stored in local configuration files that you create and manage.
  • API keys. Any API keys you configure (for data providers like Alpha Vantage, FRED, or news services) are stored locally in your .env or api_keys.py file. These are never transmitted to us.
  • Trade logs. The bot writes detailed logs of its activity, including trade executions, signals, and risk events, to log files on your local disk.
  • Market data. Data fetched from external data sources (Yahoo Finance, Alpha Vantage, etc.) is processed in memory and may be cached locally.

You have full control over all of this data. You can view, modify, or delete it at any time.

3. Data Sent to Third Parties

When you use slmaj, the Software communicates with third-party services that you configure. These are direct relationships between you and those services:

  • Interactive Brokers. The bot connects to your IBKR Trader Workstation or IB Gateway on your local machine. Trade orders and account queries are sent to IBKR through your local connection. This is governed by your agreement with Interactive Brokers.
  • Data providers. The bot fetches market data from services like Yahoo Finance, Alpha Vantage, FRED, CoinGecko, and news APIs. These requests use your API keys and are subject to each provider's privacy policy.

slmaj does not act as an intermediary for these connections. The bot communicates directly with each service from your machine.

4. Website Analytics

The slmaj.com website currently does not use third-party analytics services. We do not use Google Analytics, Facebook Pixel, or similar tracking tools.

Vercel, our hosting provider, may collect basic server logs (IP address, page requested, timestamp) as part of standard web hosting. This is governed by Vercel's Privacy Policy.

5. License Verification

When you launch slmaj, the Software performs a license verification check with Gumroad's API to confirm that your license key is valid and active. During this check:

  • Your license key is sent to Gumroad's servers.
  • A machine identifier (a hash derived from your hardware) is sent to verify single-machine binding.
  • Gumroad returns a response indicating whether the license is valid, invalid, or refunded.

No personal information beyond the license key and machine identifier is transmitted during this check. This process is governed by Gumroad's Privacy Policy.

6. Email Collection

If you sign up for our newsletter or contact us via email, we collect and store your email address for the purpose of communication. We will never sell, rent, or share your email address with third parties for marketing purposes.

You can unsubscribe from any communications at any time by using the unsubscribe link in our emails or by contacting us directly.

7. Cookies

The slmaj.com website does not set any first-party cookies. We do not use cookies for tracking, analytics, or advertising purposes.

If you interact with embedded third-party content (such as Gumroad's checkout), those services may set their own cookies according to their respective privacy policies.

8. Your Rights

You have the right to:

  • Access your data. Since the bot runs locally, you already have full access to all data it creates on your machine.
  • Delete your data. You can delete all local files (logs, configs, cached data) at any time by removing the slmaj directory.
  • Request account deletion. If you want us to delete any email address or purchase information we hold, contact us at support@slmaj.com and we will process your request within 30 days.
  • Data portability. All local data is stored in standard formats (text logs, configuration files) that you can freely copy or move.

9. Changes

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

For questions about this Privacy Policy, contact us at: support@slmaj.com