Security

• API keys are encrypted at rest using Fernet (AES-128) before storage
• Keys stored locally in DuckDB — never sent to any third party
• Use read-only API keys with futures/trade permissions only (no withdrawals)
• Data sync stays within your local machine