Privacy policy

What we collect

• Account details: your email address, and your name if you give one. Signing in with Google is optional and shares only your basic profile.
• Trading data: the trades, executions, tags, notes and attachments you record or import.
• Broker credentials, only if you connect a broker: a read-only API key, held encrypted. We never ask for and never store a broker password.
• Operational data: sessions and security events needed to keep your account safe.

How it is protected

Data is encrypted in transit and at rest. Every query in the backend is scoped to the account that made it, and there is a test suite whose specific job is to attack the API and prove that no account can read another account’s data.

What we do not do

• We do not sell your data.
• We do not share your trading data with other users.
• We do not hold credentials that could place an order on your behalf.

Processors

We use third parties to run the service — hosting, email delivery, and a payment processor once billing opens. Each receives only what it needs to perform its function.

Your control

Export every trade, tag, note and attachment at any time, on any plan including free. Deleting your account removes your data from production immediately and from backups within 30 days. For access, correction or deletion requests, email tradedrift.app@gmail.com.