Privacy Policy

We collect what we need to run the app: an email + password (or Google OAuth), the trade data you or your broker send us, and basic device / usage info to keep the service working. We do not sell your data. We do not use your trades to train third-party AI models. You can export or delete your account at any time.

Account information. When you sign up we collect your email address and either a hashed password or the basic profile fields your identity provider returns (Google OAuth returns your name, email, and profile picture URL). We use these to authenticate you and contact you about the service.

Trading data. Trades you log manually, your journal entries, screenshots, setups, confluences, process-score toggles, prop firm account metadata (firm, size, phase), and account balance history. When you connect a broker, we receive fills, positions, contract identifiers, timestamps, and account identifiers from that broker on your behalf.

Broker credentials. If you use the legacy Tradovate username/password path, we store those credentials encrypted at rest with AES-256. For OAuth-based broker connections (Tradovate OAuth, Rithmic) we store only the access token and refresh state, also encrypted at rest.

Device and usage data. IP address, browser type, pages viewed, and error logs. We use these for security, debugging, and understanding which features are actually used. We do not use third-party advertising cookies.

Push notification tokens. If you opt in to browser or desktop notifications for trade fills and prop firm alerts, we store the push endpoint your browser gives us so we can deliver notifications.

We use your data to (a) run the service -- log trades, compute analytics, check prop firm rules, deliver notifications; (b) keep you signed in; (c) send you transactional email (password resets, security alerts, receipts); (d) prevent abuse and diagnose errors; and (e) improve the product in aggregate. If you use the built-in AI assistant (“Atlas”), we send the specific prompt plus a limited trading context you approve to Anthropic so it can generate a response. Atlas conversations are stored under your account so you can revisit them.

We process your data (a) to perform the contract you enter into when you sign up, (b) for our legitimate interests in running and securing the service, (c) to comply with legal obligations, and (d) with your consent where required (for example, push notifications).

We share data only with the vendors we need to run the service, and only for that purpose:

• Supabase -- our database, authentication, and file storage. Your account, trades, journal entries, and encrypted broker credentials live here. Data is stored in the United States.
• Vercel -- hosts the web app. Handles request logs and edge delivery.
• Railway -- runs the background worker that maintains broker websockets for you.
• Tradovate and Rithmic (and any broker you connect) -- only if you initiate a connection. Your credentials flow directly to them; we act as a client on your behalf.
• Anthropic -- only when you use Atlas. We send prompts and a limited trade context. Anthropic’s API is contractually prohibited from training on API traffic.
• Google (Gmail / Google OAuth) -- if you choose to sign in with Google, Google returns basic profile data (name, email, picture URL) to us. We do not read your Gmail or other Google services.

We do not sell your personal data. We do not share it with advertisers. If we are ever legally required to disclose data (subpoena, court order), we will push back where appropriate and, where lawful, notify you.

All traffic between your browser and TradeIndex is served over HTTPS. Broker credentials and OAuth tokens are encrypted at rest. Database rows are protected by per-user Row Level Security so one user cannot query another user’s data. Access to production infrastructure is limited to the founder and audited via the vendor consoles. No system is perfect -- if you suspect a security issue, email support@tradeindex.ai and we will respond.

You can (a) access and update your account information from Settings; (b) disconnect any broker from Settings → Connections; (c) export your trades to CSV from the Trades page; and (d) delete your account, which permanently deletes your trades, journal entries, screenshots, prop firm accounts, and broker credentials. Depending on where you live (EU / UK / California / etc.) you may have additional rights to access, correct, port, or object to processing of your data. Email support@tradeindex.ai and we will process the request.

We keep your data for as long as your account is active. If you delete your account, we delete your content within 30 days, except where we’re required by law to keep minimal records (for example, tax records for paid subscriptions). Encrypted backups may retain deleted content for up to 30 additional days before rolling out of the backup window.

TradeIndex is operated from the United States and our subprocessors store data in the United States. If you use the service from outside the US, your data will be transferred to and processed in the US. Where required by law, we rely on standard contractual clauses or an equivalent transfer mechanism with our subprocessors.

TradeIndex is not directed at people under 18. We do not knowingly collect data from anyone under 18. If you believe a child has provided us data, email support@tradeindex.ai and we will delete it.

We use cookies and localStorage strictly to keep you signed in, remember your interface preferences (filters, dashboard layout, sidebar order), and secure the session against CSRF. We do not use third-party advertising or tracking cookies. If your browser supports Do Not Track, we honor it by not loading any optional analytics.

When we make material changes we update the “Last updated” date above. For changes that expand what we collect or how we share it, we will also notify you in the app or by email before the change takes effect.

Questions, requests, or complaints about this policy? Email support@tradeindex.ai or use our contact page.