Privacy Policy
Last updated: March 2026
1. Introduction
BacktestKit (“the Service”) is operated by Aeybit (“the Company,” “we,” “us,” or “our”). BacktestKit is an educational stock screener and backtesting tool for technical analysis.
This Privacy Policy describes what information we collect, how we use it, how we protect it, and your rights regarding your data. We are committed to protecting your privacy and handling your data transparently.
2. Information We Collect
We collect the minimum amount of information necessary to provide and operate the Service. When you sign in using Google OAuth, we access the following information from your Google account:
- Name — Your display name as provided by your Google account.
- Email address — Your primary email address associated with your Google account.
- Profile picture — Your Google account profile photo.
These are the only types of Google user data we access. We use standard, non-sensitive Google OAuth scopes (openid, email, profile) and do not request access to any sensitive or restricted Google API scopes. We do not access your Google contacts, calendar, drive files, browsing history, or any other Google services data.
3. How We Use Your Information
We use the information collected from Google OAuth solely for the following purposes:
- Account creation and authentication — To create your account, verify your identity, and allow you to securely sign in to the Service.
- Account identification — To identify you within the Service and associate your saved screeners and preferences with your account.
- Display personalization — To show your name and profile picture within the Service interface.
We do not use your Google user data for advertising, marketing, profiling, or any purpose unrelated to providing the core functionality of the Service.
4. Information Sharing and Disclosure
We do not sell, rent, lease, or trade your personal information or Google user data to any third parties.
We do not share your Google user data with third parties except in the following limited circumstances:
- Service providers — We may use trusted third-party services (such as hosting and infrastructure providers) that process data on our behalf solely to operate the Service. These providers are contractually obligated to protect your data and may not use it for any other purpose.
- Legal requirements — We may disclose your information if required to do so by law, regulation, legal process, or governmental request.
- Protection of rights — We may disclose information when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
We do not transfer Google user data to third parties for purposes unrelated to providing or improving the Service.
5. Data Storage and Protection
We take the security of your data seriously and implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption in transit — All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
- Secure authentication — We use Google OAuth 2.0 for authentication and do not store your Google account password.
- Access controls — Access to user data is restricted to authorized personnel and systems only.
- Minimal data collection — We collect only the minimum data necessary for the Service to function.
While we strive to protect your personal information, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.
6. Data Retention and Deletion
We retain your personal information only for as long as your account remains active and as necessary to provide the Service to you.
- Your Google user data (name, email, profile picture) is retained for the duration of your account.
- If you wish to delete your data, you can request account deletion by contacting us at the email address listed below. Upon receiving your request, we will delete your personal data within 30 days.
- You can also revoke BacktestKit’s access to your Google account at any time by visiting your Google Account permissions page and removing BacktestKit from the list of connected apps.
- After account deletion or access revocation, we will remove your personal data from our active systems. Some data may be retained in backups for a limited period before being permanently deleted.
7. Your Rights
You have the following rights regarding your personal data:
- Access — You can request a copy of the personal data we hold about you.
- Correction — You can update your information by updating your Google account profile, which will be reflected in the Service.
- Deletion — You can request the deletion of your account and all associated personal data by contacting us.
- Revocation — You can revoke our access to your Google data at any time through your Google Account settings.
To exercise any of these rights, please contact us using the information provided in Section 10 below.
9. Google API Services Compliance
BacktestKit’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
In compliance with this policy:
- We only use Google user data for the purposes described in this Privacy Policy (authentication and account management).
- We do not transfer Google user data to third parties unless necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger or acquisition with adequate data protection.
- We do not use Google user data for serving advertisements.
- We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, to comply with applicable law, or the data is aggregated and anonymized for internal operations.
10. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Aeybit
Email: [email protected]
Website: aeybit.com
11. Changes to This Privacy Policy
- We reserve the right to update this Privacy Policy at any time. Changes will be effective immediately upon posting the updated policy on this page.
- We will update the “Last updated” date at the top of this policy when changes are made.
- Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.
- We encourage you to review this Privacy Policy periodically for any changes.