Legal
Privacy Policy
Last updated 2026-11-06
What we collect
Account information (email, organization membership), broker connection metadata, and the trading data your connected accounts generate (positions, trades, balances) so the Trade Copier and AI Platform can function. Broker credentials are encrypted at rest (AES-256-GCM) and are never stored in plain text.
How AI features use your data
AI features (Coach, Journal, Chat, Risk Manager, and others) send relevant account/trade context to whichever AI provider is configured for your request (OpenAI, Anthropic, Google, or a self-hosted model) to generate a response. This data is sent per-request, not used to train third-party models by default.
Payment data
Billing is handled by Stripe. We never see or store your full card number — Stripe's hosted Checkout and Customer Portal handle payment collection and management directly.
Data retention & deletion
You can request deletion of your account and associated data at any time by contacting us. Audit logs related to security events (logins, credential changes) are retained separately for security purposes.
Access controls
Every table in our database enforces row-level security scoped to your account — your data is isolated at the database layer, not only by application logic. Platform staff access to your data is limited to what's required for support and is logged.
Contact
Questions about this policy or your data? Reach us on the Contact page.