Privacy Policy

1. Introduction

trackmyprop ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trade journaling and analytics platform at trackmyprop.app ("the Service").

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials through our authentication provider (Clerk). We do not store passwords directly.

Trading Data

When you connect trading platform accounts (cTrader, Trade Locker, NinjaTrader, Tradovate, MetaTrader) or upload trade history files, we collect and store your trade records including: trade entries and exits, instrument symbols, position sizes, profit and loss figures, timestamps, and account identifiers.

Broker Credentials

For platforms that require credential-based authentication (such as Trade Locker), we encrypt and store your credentials using industry-standard Fernet encryption. For OAuth-based platforms (such as cTrader), we store encrypted access and refresh tokens. We never store credentials in plain text.

Usage Data

We automatically collect certain information when you use the Service, including your browser type, device information, pages visited, and interaction patterns. This data is collected through analytics tools and is used to improve the Service.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Import and display your trade history and performance analytics
• Authenticate your identity and manage your account
• Process payments and manage subscriptions
• Send transactional emails (account updates, trial notifications, feature announcements)
• Respond to your requests and provide customer support
• Detect, prevent, and address technical issues or abuse

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service providers: We share data with third-party services that help us operate the platform, including Clerk (authentication), Vercel (hosting), Railway (backend infrastructure), Resend (email delivery), and Whop (payments).
• Trading platforms: When you connect a broker account, we exchange authentication tokens with the respective platform to access your trade data.
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Shared journal links: If you choose to share your journal publicly via a share link, the trade data included in that share will be visible to anyone with the link.

5. Data Security

We implement industry-standard security measures to protect your data. All broker credentials and tokens are encrypted at rest using Fernet symmetric encryption. Data in transit is protected via TLS/HTTPS. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data and trade records for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data and trade records within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Export your data in a portable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at hello@trackmyprop.app.

8. Cookies and Analytics

We use essential cookies for authentication and session management. We may use analytics tools to understand how the Service is used. These tools collect anonymized usage data and do not track you across other websites.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States (where our hosting and service providers operate). By using the Service, you consent to such transfers. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact

If you have any questions about this Privacy Policy, please contact us at hello@trackmyprop.app.