Security & Your Money
Whether Nyria can move your money, what a broker connection actually lets it do, how to revoke it in one click, and what is encrypted and what is not.
Your money never leaves your brokerage. Nyria places orders in an account you own, at a broker you chose, using access you granted and can take back at any moment.
Can Nyria move my money?
No. The access a broker connection grants covers three things:
- Reading your accounts, balances and positions
- Placing orders
- Cancelling orders
It does not cover withdrawals, transfers, or changing account settings. There is no path, in the product or in the broker's own permissions, for Nyria to move funds out of your account.
Where your money is held
At your broker, in your own account, the whole time. Nyria never holds customer funds and never takes custody of your positions. If Nyria went dark tomorrow, your cash and your open positions would sit exactly where they are, and you would manage them from your broker as usual.
What Nyria charges you for the service is separate, and is billed through Stripe. See Pricing & Limits.
We never see your broker password
Every connection is either an OAuth authorization you grant at the broker's own sign-in screen, or an API key you generate yourself in the broker's dashboard.
- We never receive your broker password, and there is no way for you to give us one
- You can revoke access at any moment, from the broker's own app or by disconnecting the integration in Nyria
How to revoke access
Either end works, and either one is immediate:
- In Nyria, open Integrations, click the broker, and click Disconnect
- Or revoke the authorization in your broker's own app or API-key settings
Disconnecting pauses every bot using that integration. It does not close open positions, so close anything you do not want left running first. See When an Order Fails for the manual recovery path.
What is encrypted
- Everything is encrypted in transit (TLS)
- Whop and Stripe API keys and webhook secrets are encrypted at rest with AES-256-GCM
Broker access tokens themselves are stored server-side in Nyria's database, and they are not individually encrypted at rest today. Treat them as live credentials that Nyria holds on your behalf. If that matters to your threat model, prefer a broker that lets you scope an API key narrowly, keep the connected account funded only for what you intend to trade, and revoke the authorization when you are not trading.
What is still your risk
Security is not the same as safety. Nyria cannot take your money, but a strategy can still lose it, and a failed order can still leave a position open. Read Known Limitations and the Risk Disclosure before you trade live, and start on Nyria Paper.
Next Steps
- Connect Your First Integration - the connection methods, per broker
- Paper Trading - test without risking real money first
- Known Limitations - what Nyria will not do for you
Pricing & Limits
What Nyria costs and every cap it enforces, in one place: the price of each plan, plus the limits on strategies, bots, option legs, DTE and allocation.
Known Limitations
What Nyria will not do for you: almost no order retries, no guaranteed fills, no repaint detection, plus the measured latency and alert delays to plan around.