Privacy Policy

1. Introduction

trackmyprop ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trade journaling and analytics platform at trackmyprop.app ("the Service").

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials through our authentication provider (Clerk). We do not store passwords directly.

Trading Data

When you connect trading platform accounts (cTrader, Trade Locker, NinjaTrader, Tradovate, MetaTrader) or upload trade history files, we collect and store your trade records including: trade entries and exits, instrument symbols, position sizes, profit and loss figures, timestamps, and account identifiers.

Broker Credentials

For platforms that require credential-based authentication (such as Trade Locker), we encrypt and store your credentials using industry-standard Fernet encryption. For OAuth-based platforms (such as cTrader), we store encrypted access and refresh tokens. We never store credentials in plain text.

Usage Data

When analytics is enabled, we collect a limited set of anonymous product events such as public pages or app sections viewed, major workflow completions, app version, operating system, and broad success or failure categories. We do not attach your trackmyprop account identity or send trades, profit and loss, account identifiers, journal notes, broker credentials, or imported files to product analytics.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Import and display your trade history and performance analytics
• Authenticate your identity and manage your account
• Process payments and manage subscriptions
• Send transactional emails (account updates, billing notices, feature announcements)
• Respond to your requests and provide customer support
• Detect, prevent, and address technical issues or abuse

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service providers: We share data with third-party services that help us operate the platform, including Clerk (authentication), Vercel (hosting), Railway (backend infrastructure), PostHog (product analytics), Resend (email delivery), and Whop (payments).
• Trading platforms: When you connect a broker account, we exchange authentication tokens with the respective platform to access your trade data.
• AI connections: If you choose to connect a supported external AI client, you direct trackmyprop to send selected cloud-synced data to that client through a revocable, read-only connection. trackmyprop does not host the AI conversation. The provider you choose processes the data it receives under its own privacy terms and retention practices.
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Shared journal links: If you choose to share your journal publicly via a share link, the trade data included in that share will be visible to anyone with the link.

5. Data Security

We implement industry-standard security measures to protect your data. All broker credentials and tokens are encrypted at rest using Fernet symmetric encryption. Data in transit is protected via TLS/HTTPS. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data and trade records for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data and trade records within 30 days, except where we are required to retain it for legal or regulatory purposes.

Private files or images generated through an AI connection are temporary unless you or the AI client saves a copy. A public share link remains subject to the sharing choice you made when creating that link.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Export your data in a portable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at hello@trackmyprop.app.

8. Cookies and Analytics

We use essential cookies for authentication and session management. PostHog processes the privacy-limited product events described above in its US region. Automatic click tracking and session replay are disabled, website analytics is not persisted across browser sessions, and we do not use product analytics to track you across other websites. The desktop app includes an Anonymous usage data switch under Settings → Account, and also respects your device's Do Not Track preference.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States (where our hosting and service providers operate). By using the Service, you consent to such transfers. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact

If you have any questions about this Privacy Policy, please contact us at hello@trackmyprop.app.