Security and Privacy

Overview

VarianTrade is built with a user-owned model integration architecture. This design ensures that you retain ownership of your API credentials, subscription accounts, and trading decisions.

Credential Handling and Encryption

VarianTrade does not store raw secrets or credentials inside its main application databases:

• Decoupled Storage: API keys, session tokens, and broker secrets are moved immediately upon submission into an isolated secret manager.
• Opaque References: The application databases store only a unique, random credential reference string to retrieve configuration metadata.
• Encryption at Rest: Any credentials stored in the secret manager are encrypted at rest using industry-standard cryptographic keys.

Granular Scopes and Approvals

External integrations operate under a permission model called scopes. These scopes ensure that an AI application is only granted the minimum permissions necessary:

• account.read: Grants access to non-sensitive account metadata.
• portfolio.read: Grants access to open positions and realized P&L metrics.
• risk.read: Grants access to configured risk settings and sizing rules.
• signals.read: Grants access to recent trading recommendations.
• market.read: Grants access to fetch live price snapshots.
• trade.propose: Grants permission to suggest a trade proposal.

Every permission request must be approved by the user through a Telegram confirmation step before any tokens or access codes are issued.

Immediate Revocation

You retain absolute authority to terminate any connection or device.

• Immediate Expiration: Revoking a connection via /ai_connections deletes the associated secret reference, revokes active OAuth tokens, and replaces local bridge device secrets with randomized, unusable placeholder hashes.
• Open Job Cancellation: Revoking a device instantly cancels any running or queued AI jobs associated with it.

Messaging Security

To protect your accounts from credential harvesting or accidental leakage:

• Immediate Message Deletion: When you enroll an API key in a private Telegram chat, the bot is programmed to delete your message from the chat history immediately before validating the credential.
• No Plaintext Prompts: VarianTrade will never prompt you to paste broker passwords, API keys, or browser session cookies into a public group chat, support ticket, or ordinary message. All key registrations are restricted to private chats during an active configuration flow.

Unlinking and Data Control

If you wish to disconnect your Telegram account from VarianTrade:

• The /unlink Command: You can run /unlink in Telegram to request unlinking.
• Notification Cessation: Confirming the request deletes the link between your Telegram account and the database, immediately halting all alerts, signal notifications, and chat actions.