Security at TradersHub Ninja

1. Our approach

Security is layered into how we build and operate TradersHub Ninja: we minimize the data we collect, rely on reputable managed infrastructure, encrypt data in transit, restrict access on a need-to-know basis, and keep our dependencies current.

2. No custody of funds or brokerage credentials

We are not a broker or exchange. We do not hold your funds or assets, and we do not need — and do not ask for — your brokerage or exchange login credentials, withdrawal access, or wallet seed phrases to provide the Service. This dramatically limits the impact of any compromise.

3. Encryption

• In transit. All traffic between your browser and the Service is encrypted using HTTPS/TLS.
• At rest. Your data is stored in a managed, access-controlled database provided by our infrastructure partner, with encryption at rest.
• Passwords. Account passwords are salted and hashed by our authentication provider. We never store or have access to your password in plain text.

4. Authentication

Accounts are protected by an industry-standard authentication system with secure, HTTP-only session cookies. We validate sessions on every request and apply server-side checks to protected areas. We also screen signups to reduce fraudulent and disposable-email abuse.

5. Payment security

Billing is handled by a third-party payment processor. Card data is entered with and processed by that provider — TradersHub Ninja does not receive or store full card numbers. We recommend reviewing your processor’s security practices as well.

6. Infrastructure

We host the Service on reputable cloud infrastructure and use a managed database and authentication platform. Secrets and credentials are stored in environment configuration, not in source code, and are restricted to the systems that need them.

7. Access controls

Access to production systems and user data is limited to authorized personnel on a least-privilege, need-to-know basis. Administrative functions are separated from ordinary user access and protected by additional checks.

8. Your responsibilities

• Use a strong, unique password and keep your credentials private.
• Be alert to phishing. We will never email, DM, or message you asking for your password, payment details, or seed phrase.
• Sign out on shared devices and keep your email account secure, since it can be used to reset access.
• Contact us immediately if you suspect unauthorized access to your account.

9. Responsible disclosure

If you believe you’ve found a security vulnerability, we’d genuinely like to hear from you. Please email info@tradershub.ninja with details and steps to reproduce, and give us a reasonable opportunity to investigate and fix the issue before any public disclosure. Please do not access, modify, or delete data that isn’t yours, and avoid privacy violations or service disruption while testing. We appreciate good-faith research and will work with you in good faith.

10. Limitations

No product, system, or method of transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security. Your use of the Service is also governed by our Terms of Service and Privacy Policy.

11. Contact

Security questions or reports? Email info@tradershub.ninja.