Privacy Policy

Who we are

in runs Trade Senior and is the controller of the personal data described here. Contact for privacy: .

What we collect

• Account: your email address and a password (stored only as a secure hash by our sign-in provider).
• Your records: the accounts, trading days, payouts, charges and settings you enter or sync, including journal notes, trade ratings and screenshots you add.
• Billing: your plan, billing period, trial status, and Stripe customer and subscription IDs. Stripe collects and holds your card and billing details. We do not see or store your full card number.
• Ask usage (VIP): the questions you send and a count of questions per day, to apply the daily limit.
• Support: messages you send, our replies, the contact detail you give, and basic details about your setup (such as app version).
• Error reports: the error message, page, app version and browser type when something breaks. They do not include your trading data.
• Technical data: your IP address and request logs, kept by our hosting and security providers for security and reliability.
• Emails: we send service emails (confirmation, trial and billing notices, support replies). We do not send marketing email unless you opt in.

What we do not collect

No advertising trackers and no selling or sharing of your data for advertising. We never ask for or receive your trading platform password. Our servers do not read your broker or prop firm accounts: when you link TopstepX, your own browser does the reading.

Why we use it, and our legal basis

• To run the service and keep your records across devices: needed to perform our contract with you.
• To take payment, manage your trial and plan, and keep tax records: contract and legal obligation.
• To keep things secure, prevent abuse and fix errors: our legitimate interests.
• To answer support: contract and legitimate interests.
• To answer Ask questions: contract (you ask for it). Your question and a summary of your records needed to answer it are sent to Anthropic and used only to produce your answer.
• To send optional emails: your consent, which you can withdraw.

Who we share it with

Only with the providers listed on the Providers page (Supabase, Vercel, Stripe, Anthropic, Resend, Google Fonts), with professional advisers, authorities when the law requires it, or a buyer if the business is sold. We do not sell personal data.

International transfers

Our providers may process data in the United States and other countries. Where required, we rely on safeguards such as standard contractual clauses or the providers' certifications.

Linking TopstepX

If you link TopstepX, your browser talks to TopstepX directly to read your trades. Your API key is kept only in that browser (in memory, or in this device's storage if you tick "Remember this key on this device"). It is never saved to your Trade Senior account and never sent to our servers. Trades read this way are saved to your account as logged days. If you start Order copying, your browser also sends market orders for the accounts you matched, directly to the platform.

Linking Tradovate (when available)

If Tradovate linking is offered, you sign in on Tradovate's own login page and approve the connection (OAuth). Tradovate gives us an access token, not your password. This token is kept on our servers, encrypted, so we can read your accounts, positions and fills and renew the connection. We use it only for features you turn on and only for accounts you connect. You can disconnect in the app and in your Tradovate settings, which ends our access.

Cookies and local storage

We use your browser's local storage only for things the service needs: keeping you signed in, remembering settings such as theme, remembering the plan you picked on the welcome page for up to 2 days, and (if you choose) a remembered platform key. These are strictly necessary, so we do not show a cookie banner. We use no advertising or analytics cookies. Stripe, when you check out, may set its own cookies for payment and fraud prevention.

How long we keep it

While your account is open. You can delete your account at any time: menu, Account, Delete my account. That permanently removes your records, support messages and plan details and cancels any paid plan. Copies in our automatic backups are overwritten within 14 days. We keep only what we must by law, such as billing and tax records (held by Stripe and by us, typically for up to 7 years), and security logs for a short time.

Your rights

You can download your records from the menu at any time. Depending on where you live (including the EU, UK, and California and other US states) you may have the right to access, correct, delete, restrict or port your data, to object to certain uses, to withdraw consent, and not to be discriminated against for using these rights. Email and we will reply within 30 days. You can also complain to your data protection authority. We do not sell or "share" personal data as those terms are defined in California law.

Security

Each account's records are separated so other users cannot read them. Connections are encrypted. No online service is perfectly secure, so keep your own backups. If a breach affects your data, we will tell you and the authorities as the law requires.

Children

The service is for people 18 and over. We do not knowingly collect data from anyone under 18 and will delete it if we learn we have.

Changes

If we change this policy in an important way we will tell you in the service or by email.