Privacy policy

What we collect

• Account details: your email address, and your name if you give one. Signing in with Google is optional and shares only your basic profile.
• Trading data: the trades, executions, tags, notes and attachments you record or import.
• Broker credentials, only if you connect a broker: a read-only API key, held encrypted. We never ask for and never store a broker password.
• Operational data: sessions and security events needed to keep your account safe.

How it is protected

Data is encrypted in transit and at rest. Every query in the backend is scoped to the account that made it, and there is a test suite whose specific job is to attack the API and prove that no account can read another account’s data.

What we do not do

• We do not sell your data.
• We do not share your trading data with other users.
• We do not hold credentials that could place an order on your behalf.

Processors

We use third parties to run the service — hosting, email delivery and payment processing. Each receives only what it needs to perform its function.

Your control

For access, correction, export or deletion requests, email tradedrift.app@gmail.com from the address on your account.