Gloria — Security at Gloria

What we built, in plain language.

• We never hold your brokerage credentials. Connections are made through read-only OAuth via SnapTrade; your login never touches our servers, and the connection cannot trade or move money.
• Wallets are watch-only. You give us a public address; we read public balances. We never ask for, accept, or store private keys or seed phrases.
• We don't know your name. Accounts are an email and a hashed password. No identity documents, no SSN, no KYC — Gloria is an intelligence layer, not a brokerage.
• Encryption everywhere it matters. Sensitive fields (access tokens, wallet addresses) are encrypted at rest; all traffic is encrypted in transit; secrets live in managed secret storage.
• Minimal by design. No third-party trackers. Rate-limiting uses non-reversible keyed codes instead of stored IP addresses. What we don't collect can't leak.
• AI with boundaries. Model providers receive pseudonymous market content only — never your identity — and may not train on it.
• Found something? Report security issues to security@gloriafinance.ai. We read everything.