Privacy policy
Last updated: October 24, 2026
On this page
Introduction
Nyria LLC ("Nyria," "we," "us," or "our") respects your privacy. This policy describes what is collected, how it is used, when it is shared, and how it is protected when you use the trade automation platform and related services (the "platform").
By using the platform, you consent to the practices described here. If you do not agree, do not use the platform.
1. What we collect
1.1 What you provide
- Account: name, email, password, registration details.
- Payment: billing address and payment method (handled by Stripe and other processors).
- Selling through Nyria: if you sell a strategy through Nyria, the plans you set up (name, price, billing interval, and tier), the country of your payout account, and any tax form you give Nyria.
- Trading configuration: strategy settings, bot configurations, instruments, position sizing.
- Integration credentials: OAuth tokens, API keys, and access tokens for connected brokers and exchanges. TLS 1.2+ in transit; encrypted at rest.
- Communication: support messages, feedback, and survey responses.
- Early-access interest: if you submit your email on an integration page or use the in-app Notify me button, we collect your email address and the integration you expressed interest in.
- Discord and Telegram: server, group and channel IDs, and message content from Discord channels you configure and from Telegram groups and channels in use with Nyria, for alert monitoring.
- Telegram messages: for each Telegram group or channel in use with Nyria (one a strategy reads, one a Nyria user added the bot to, or one previewed in the last 7 days), Nyria keeps each message's text and its author's Telegram ID and display name for 7 days, for the strategy setup preview. For other chats the Nyria bot is in, it keeps only the chat's ID, title, public username and the bot's status. It keeps the Telegram ID of whoever added the bot for as long as the bot stays in the chat. While a message is being passed to a strategy, the full message, including its author's username, is held for up to 10 minutes; if it can't be passed on, up to 500 characters of it go to Nyria's internal operations alert.
- Telegram account: linking Telegram to Nyria stores your Telegram user ID, username, and display name.
- Discord account link: if you complete Discord server verification, Nyria stores your Discord user ID, username, and display name, and records that your Nyria account has been verified as a member of the relevant Discord server. This link persists until you disconnect it in Nyria or your Discord authorization is revoked.
1.2 Collected automatically
- Device: IP address, browser, operating system, device identifiers.
- Usage: pages visited, features used, actions taken, timestamps, session duration.
- Logs: server requests, responses, errors, and performance metrics.
- Trading activity: alerts received, orders placed, execution results, transaction history.
- Cookies: see the cookie policy.
1.3 From third parties
- Brokers: balances, positions, order status, and execution details from connected brokers.
- OAuth providers: profile information from Google, Discord, or other providers used to sign in.
- Payment processors: transaction status, billing confirmations, refunds, and disputes from Stripe and others, including for strategies bought through Nyria.
- Stripe, if you sell through Nyria: Stripe collects your identity, bank, and tax details itself, on its own pages, to run your payout account. It tells Nyria the account's status (whether your details are complete, and whether transfers and payouts are enabled), anything it still needs from you, and the transfers, payouts, refunds, and disputes on your sales. Nyria does not receive your full bank account number from Stripe, or your taxpayer identification number unless you give Nyria a tax form.
- Alert sources: webhook payloads, alert content, and metadata from TradingView, Discord, Telegram, MCP clients (including AI agents you authorize), and other connected services.
2. How your data is used
The data collected is used to:
- Run the platform: process alerts, transmit your instructions to your broker, and manage your account.
- Bill: handle subscriptions and payments.
- Pay creators: work out and send creators' shares of sales through Nyria, apply refunds and disputes to them, and meet tax reporting duties.
- Communicate: service notifications, security alerts, support responses, and important updates.
- Improve: analyze usage, diagnose issues, ship new features.
- Protect: detect and prevent fraud, abuse, and security threats.
- Comply: meet applicable laws, regulations, and legal processes.
- Analyze: generate aggregated, anonymized usage statistics.
- Market: email you about setting up and using Nyria and about its features. Every such email has an unsubscribe link, and you can opt out at any time.
- Early-access notifications: if you submit your email through an integration page or the in-app Notify me button, we send a one-time email when that integration becomes available. Every such email has an unsubscribe link.
3. Sharing and disclosure
Nyria does not sell your personal information. We may share it in the following circumstances:
3.1 Service providers
We share information with service providers that help operate the platform, and only what each one needs for the service it provides. They handle it under their own terms and data-protection commitments. Categories include:
- Cloud infrastructure: hosting, storage, and compute.
- Payment processing: Stripe and other processors, for subscription billing, for payments for strategies sold through Nyria, and for creators' payout accounts and payouts.
- Analytics: PostHog, for product usage analytics. While you are signed in to the app, these events are linked to your account (name, username and email).
- Customer support: Tidio, for the support chat in the app, which receives the messages you send in that chat, along with your name and email when you are signed in, so we can reply; and other help desk and communication tools.
- Email: transactional and marketing delivery. Email addresses submitted for early-access notifications are added to segments in our email service provider (Resend) so that a single integration-launch notification can be sent to people who requested it for that integration. The broker or integration name is used as the segment label.
- Authentication: OAuth providers (Google, Discord) for sign-in.
- Security: fraud prevention and monitoring.
- AI and machine learning: when an alert is not in one of Nyria's own formats, its text is sent to OpenRouter, which routes it to a model provider, to be turned into a structured order. What is sent is the alert text, your strategy's enabled directions, and its open positions. No account number, broker credential, name, or email address is sent.
3.2 Creators of strategies you copy
When you deploy a bot that copies a strategy someone else published, you direct us to share information about that bot with the strategy's creator so they can support it. For each bot copying their strategy, the creator can see your name and email address, which broker the bot runs on, whether the account is live or paper, the position size you set, whether the bot is running and when it was set up, whether the bot is erroring, and its most recent log line. A log line can include order details and, when an order is refused for lack of funds, the balance your broker reported.
Otherwise a creator cannot see your balance, and cannot see your account number, broker credentials, or any strategy that is not theirs. Creators are independent third parties, not service providers acting for Nyria, and they agree to use this information only to support the strategy (Terms of Service, Section 13D.4).
If you buy a strategy through Nyria, its creator also sees, in their list of members, your Nyria account name, that you bought through Nyria, and when your access began. Their record of each payment shows the amount, the fees taken from it, their share, and the period it covers, and does not name you. A creator never sees your card details or billing address.
3.3 If you sell through Nyria
If you sell a strategy through Nyria, Nyria gives Stripe what it needs to open your payout account and pay you, such as your email address, your country, and each transfer of your share. Information about you and what you are paid may be reported to tax authorities, such as the IRS, where the law requires it. Stripe handles what it collects from you under its own privacy policy.
3.4 Connected services
When you connect a broker, exchange, or other third-party account, we transmit the data your broker needs to execute your orders and to sync state. Those services are governed by their own privacy policies.
3.5 Legal requirements
We may disclose your information if required to do so by law, subpoena, court order, or other legal process, or if we believe in good faith that such disclosure is necessary to: (a) comply with legal obligations; (b) protect and defend our rights or property; (c) prevent fraud or illegal activity; (d) protect the safety of users or the public; or (e) protect against legal liability.
3.6 Business transfers
If Nyria is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may transfer as part of that transaction. We will notify you of any such change and your choices.
3.7 Aggregated data
We may share aggregated, anonymized, or de-identified information that cannot reasonably identify you, for purposes including research, marketing, and analytics.
3.8 With your consent
We may share your information for other purposes with your explicit consent.
4. Security
TLS 1.2+ in transit; broker credentials encrypted at rest. Specifically:
- In transit: TLS 1.2 or higher between your browser, our services, and connected brokers.
- At rest: broker OAuth tokens and broker API keys are encrypted with AES-256-GCM by the application before they are stored, in a password-protected database. The encryption key is held outside the database. Daily database backups are encrypted before they are written to disk.
- Access controls: production systems and databases require credentials, which are held by the company's operators and by the services that need them.
- Support access: Nyria support staff can view your account, and take actions in it, when that is needed to help you, such as diagnosing a bot or a broker connection.
- Personnel: access to production data is limited to the company's operators. We are a small team and do not claim a formal security-training program.
- Vulnerability monitoring: dependency and platform vulnerability monitoring, with fixes applied as issues are identified. We do not currently commission third-party penetration testing.
- Incident response: security reports and suspected account compromises go to contact@nyria.io, which a person reads. A breach that affects personal information is handled as described in Section 4B.
- Vendors: we limit the third parties that receive your data; the categories are listed in the sharing section above.
No system on the public internet is 100% secure. We use commercially reasonable measures to protect your information, but cannot guarantee absolute security. You are responsible for keeping your account credentials safe.
4A. Financial data and broker credentials
4A.1 Broker OAuth tokens
When you connect a broker via OAuth, we receive and store an access token and refresh token. We do NOT receive or store your broker username, password, or security questions (this applies to OAuth connections; for Beta unofficial connections, see Section 4A.5 below). TLS 1.2+ in transit; both tokens are encrypted at rest with AES-256-GCM. Tokens grant only the permissions defined by each broker's OAuth scope, and you can revoke them at the broker at any time.
4A.2 API keys
For brokers that do not support OAuth, you provide an API key. TLS 1.2+ in transit; the key and secret are encrypted at rest with AES-256-GCM. Create keys with the minimum permissions (trading only, no withdrawal where possible) and rotate or revoke them immediately if you suspect compromise.
4A.3 Transaction data
We receive order data from your broker: status, fill prices, quantities, timestamps. It powers platform features, activity logs, and product improvements. Individual transaction data is not shared with third parties, except with the creator of a strategy you copy as described in Section 3.2, or as required by law.
4A.4 No access to funds
Nyria cannot withdraw funds, transfer securities, or initiate ACH/wire transfers. Access is limited to placing trades and reading account information. Your funds stay with your broker and are protected by your broker's controls and applicable regulatory protections (such as SIPC for securities).
4A.5 Unofficial broker credentials (beta)
For Beta broker connections that do not use OAuth or an official API, you enter your broker username and password, and Nyria uses them only to sign in to the broker for you. Neither is stored. While the broker waits for you to approve the sign-in, they are held encrypted (AES-256-GCM) in memory for at most 10 minutes and then deleted; they are never written to our database or logs. Nyria keeps only the access token the broker returns, encrypted at rest with AES-256-GCM, the same as OAuth tokens. TLS 1.2+ is used in transit.
These connections are in Beta. They use the broker's unofficial API, which may change or be discontinued without notice. You can disconnect them from your Nyria account at any time; disconnecting removes the stored access token.
4B. Breach notification
If a security breach affects your personal information, Nyria will:
- Notify affected users without unreasonable delay and as required by law.
- Describe the nature of the breach and the types of data affected.
- Explain steps taken to address it and prevent recurrence.
- Provide guidance on actions you can take to protect yourself.
- Notify relevant regulators as required by law.
If you believe your account is compromised, immediately: (1) change your Nyria password, (2) revoke broker authorizations from both Nyria and your broker, (3) review your broker account for unauthorized activity, and (4) email contact@nyria.io.
5. Retention
Personal information is retained while your account is active or as needed to provide the service. Some categories are kept longer when required by law or for legitimate business purposes:
- Transaction records and trading history (compliance and audit).
- Records of sales through Nyria, Nyria's fees, creators' shares, transfers, refunds, and disputes, and any tax form a creator gives Nyria (tax and accounting: as long as the law and payment network rules require, generally seven years, including after the account is deleted).
- Communications and support tickets (service improvement).
- Anonymized or aggregated data (indefinitely, for analytics).
- Data needed to resolve disputes or enforce agreements.
- Early-access email addresses and associated broker interest: held until the integration launches and the notification is sent, or until you unsubscribe, whichever comes first. After the notification is sent the address is subject to the same retention rules as marketing email.
- Discord account links: retained while your Nyria account is active or until you disconnect the link in Nyria, whichever comes first.
After account deletion, backups may persist for a reasonable period; anonymized data may be kept indefinitely.
6. Your rights and choices
Depending on your location, you may have the following rights:
6.1 Access and portability
Request a copy of the personal information held about you in a structured, commonly used format.
6.2 Correction
Request correction of inaccurate or incomplete personal information.
6.3 Deletion
Request deletion of your personal information, subject to certain exceptions (such as legal retention requirements).
6.4 Opt out of marketing
Unsubscribe from marketing email at any time via the "unsubscribe" link or by contacting us.
6.5 Cookie preferences
Control cookies through your browser. See the cookie policy for details.
6.6 Do Not Track
We do not currently respond to "Do Not Track" browser signals.
To exercise these rights, email contact@nyria.io. Identity verification may be required before a request is processed.
7. California privacy rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the CCPA (as amended by the CPRA):
- Right to know: request the categories and specific pieces of personal information collected, used, and disclosed.
- Right to delete: request deletion, subject to certain exceptions.
- Right to correct: request correction of inaccurate personal information.
- Right to opt out of sale or sharing: Nyria does not sell personal information or share it for cross-context behavioral advertising. If that changes, an opt-out will be provided.
- Right to limit sensitive personal information: limit certain uses of sensitive personal information.
- Right to non-discrimination: no penalty for exercising your privacy rights.
To submit a CCPA/CPRA request, email contact@nyria.io. Identity verification is required before processing. You may designate an authorized agent to act on your behalf.
7A. Other state privacy rights
Virginia (VCDPA)
Virginia residents may access, correct, delete, and obtain a copy of their personal data, and opt out of targeted advertising, sale, and profiling. Email contact@nyria.io. You may appeal a decision by contacting us within 60 days.
Colorado (CPA)
Colorado residents may access, correct, delete, and obtain a portable copy of their personal data, and opt out of targeted advertising, sale, and certain profiling. Email contact@nyria.io.
Connecticut (CTDPA)
Connecticut residents may access, correct, delete, obtain a copy of their data, and opt out of processing for targeted advertising, sale, or profiling. Email contact@nyria.io.
Nevada
Nevada residents may opt out of the sale of personal information. Nyria does not currently sell personal information. If that changes, an opt-out will be provided. Email contact@nyria.io with questions.
8. International data transfers
Nyria is based in the United States. If you access the platform from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries where our service providers operate.
Those countries may have data protection laws that differ from yours. By using the platform, you consent to the transfer.
Where required by law, appropriate safeguards are applied to international transfers, such as Standard Contractual Clauses approved by the European Commission.
9. European privacy rights (GDPR)
If you are in the EEA, United Kingdom, or Switzerland, you have additional rights under the GDPR:
- Legal basis: processing relies on contract performance, legitimate interests, consent, or legal obligations.
- Right to object: object to processing based on legitimate interests.
- Right to restrict: request restriction of processing in certain cases.
- Right to complain: file a complaint with your local data protection authority.
For GDPR inquiries, email the Data Protection Officer at contact@nyria.io.
11. Children's privacy
The platform is not intended for users under 18. We do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it. If you believe a child under 18 has provided data to us, email contact@nyria.io.
12. Third-party links and services
The platform may link to third-party sites and services. Nyria is not responsible for their privacy practices. Review their policies before you use them.
13. Changes to this policy
This policy may change to reflect new practices, technology, legal requirements, or other factors. When changes are material, we will:
- Update the "Last updated" date at the top of this page.
- Notify you by email or prominent notice on the platform.
- Provide a summary of key changes where appropriate.
Continued use of the platform after changes means you accept the updated policy.
14. Contact
Questions, concerns, or requests about this policy or our data practices:
- Email: contact@nyria.io
- Data Protection Officer: contact@nyria.io
- General contact: contact@nyria.io
- Address: Nyria LLC, 30 N Gould St, Sheridan, WY 82801
Privacy inquiries get a response within 30 days.