Security

How Leadr protects your account and brokerage connection.

We never see or store your brokerage username or password. Connecting a brokerage opens our connection provider's own hosted login.
Brokerage connections are read-only. Leadr does not place trades.
The key that links your account to the connection provider is encrypted in our application (AES-256-GCM) before it is stored, using a server-only key.
That key is stored server-side only, in a table with row-level security and no client access.
All traffic uses HTTPS, with HSTS enforced.
Sign-in is secured and every request to our API is verified on our servers.
Deleting your account starts a 90-day reactivation window. After that, a scheduled job deletes your account data, except records we are legally required to keep.