Security

OptionTrigger connects to your broker from your own machine. We designed the architecture so sensitive trading credentials stay under your control.

Local broker backend

The Desktop app runs a local broker backend on your computer. Orders are routed to IBKR TWS / IB Gateway over localhost — not through a third-party cloud relay. Your broker session tokens are not stored on OptionTrigger servers for order execution.

Account & website data

Website accounts (sign-up, subscription) are managed via Supabase with industry-standard authentication. Payment processing is handled by Stripe; we do not store full credit card numbers on our servers. See our Privacy Policy.

Transport security

optiontrigger.com is served over HTTPS. API communication between the extension, desktop app, and local backend uses encrypted channels appropriate to each layer.

Responsible disclosure

If you discover a security vulnerability, please report it to [email protected]. We appreciate responsible disclosure and will respond as quickly as possible.