Security Policy

Effective Date: October 23, 2025

Last Updated: October 23, 2025

1. Overview

At TradesCrafter, the protection of our clients’ data, accounts, and trading environments is a top priority. This Security Policy outlines the standards, protocols, and measures we use to safeguard information across all systems and services operated under the TradesCrafter brand by 0SPX AutoTrades, LLC.

This policy applies to all users, contractors, and partners who access or interact with our systems.

2. Security Objectives

Our primary objectives are to:

Protect customer data from unauthorized access or disclosure.
Maintain system integrity, ensuring our trading software performs reliably.
Prevent service interruptions through layered security and redundancy.
Comply with all applicable data protection and privacy regulations.

3. Infrastructure Security

We employ multi-layered security controls, including:

Encrypted Communication: All web traffic and data transmissions use TLS 1.2+ encryption.
Segregated Server Environments: Client environments are isolated to prevent cross-access between accounts.
Network Security Controls: Firewalls, intrusion prevention systems, and VPN segmentation are used to secure all operational networks.
Access Control: Only authorized personnel are granted access to critical infrastructure through multi-factor authentication (MFA) and role-based permissions.
Continuous Monitoring: System activity logs are continuously monitored for anomalies or unauthorized actions.

4. Application and Account Security

TradesCrafter employs strict account-level and application-layer protection standards:

License Verification: All software licenses are validated through secure token exchange before activation.
Credential Management: Passwords are hashed and stored using industry-standard cryptographic algorithms.
User Authentication: Account access is protected through strong password enforcement and optional MFA.
Session Control: Automatic timeouts and device verification reduce the risk of unauthorized account access.
Tamper Prevention: Strategies are encrypted and sandboxed to prevent reverse engineering or unauthorized modification.

5. Data Protection

We handle client data with the highest level of confidentiality and care:

Encryption at Rest and In Transit: Sensitive data is encrypted both during transmission and when stored.
Limited Data Access: Access to client data is restricted to authorized support personnel for operational purposes only.
Retention and Deletion: Data is retained only as long as required for service continuity, regulatory compliance, or contractual obligations.
Backups: Redundant encrypted backups are maintained to ensure business continuity in case of system failures.

6. Access and Operational Capabilities

TradesCrafter's infrastructure may include limited administrative access for support and compliance purposes. This access is used exclusively to:

Verify license activation and synchronization.
Monitor system performance and ensure uptime.
Provide technical support when explicitly authorized by the client.

TradesCrafter and 0SPX AutoTrades, LLC do not execute, direct, or manage trades on behalf of users.

Any view-only or diagnostic access is used strictly for software validation, compliance, and operational integrity. Users retain full control over all trading decisions and broker account activity.

7. Incident Response

In the event of a suspected or confirmed security incident:

Immediate investigation begins within 24 hours of detection.
Impacted systems are isolated and analyzed to prevent escalation.
Affected users will be notified promptly if their data is involved, as required by applicable law.
Root cause analysis is conducted, and mitigation measures are documented and implemented.

8. User Responsibilities

To maintain a secure environment, users must:

Keep login credentials confidential and never share account access.
Use strong passwords and enable multi-factor authentication where available.
Avoid installing unverified third-party software or plugins within licensed environments.
Promptly report any suspicious account activity to [email protected].

9. Compliance and Audits

TradesCrafter adheres to best practices aligned with SOC 2 and ISO 27001 security frameworks. Regular internal audits are performed to verify compliance with this policy and detect potential vulnerabilities.

10. Corporate Relationship Disclaimer

TradesCrafter is a brand operated by 0SPX AutoTrades, LLC, an independent technology provider.

0SPX AutoTrades and TradesCrafter are separate entities that collaborate for software licensing and service fulfillment purposes.

Corporate Relationship:

TradesCrafter provides client-facing access, education, and interface services.
0SPX AutoTrades develops, licenses, and maintains the proprietary algorithms and infrastructure supporting TradesCrafter.

Each entity functions independently and maintains separate operational, financial, and legal responsibilities.

11. Contact

TradesCrafter (Operated by 0SPX AutoTrades, LLC)

Email: [email protected]

Website: https://tradecrafters.com

Address: 255 S Orange Ave STE 104, Orlando, FL 32801