This policy describes how TradeTrove collects, uses, and shares information when you use our Service. We try to keep collection minimal; everything below is the complete list.
What we collect
- Account info: email address, a name (you choose), and a hashed password. Email is the unique identifier; we do not collect phone numbers.
- Subscription info: tier, billing cadence, current period end. Card numbers are never seen by TradeTrove — Stripe holds them. We store the Stripe customer/subscription IDs only.
- Activity: which strategies you download, with which parameters, against which firm. Used to power the Downloads dashboard and to suggest similar strategies.
- Challenge tracking: the challenges you create and the prop-firm metadata you enter (account size, current balance). This stays on your account.
- Compliance scans: when you paste bot code into the compliance checker, the analysis runs on our server but the source code is not stored. Public share links (`/scan?s=...`) carry the code in the URL itself; we never persist it.
- Server logs: standard request logs (IP, user-agent, path) retained 30 days for abuse investigation.
What we never collect
- Your broker credentials. TradeTrove does not connect to brokers.
- Your live account positions or P&L. The trade-log feature is synthetic until you opt into Telegram alerts with your own bot.
- The source of bots you scan with the compliance checker.
How we use it
Account and subscription info power the Service. Activity data powers your dashboard and history. We do not sell or share your data with advertisers. We do not use your data to train any AI models.
Sub-processors
- Stripe — billing, card processing, customer portal.
- Vercel— hosting and CDN. Standard request logs are governed by Vercel’s policies.
- Postmark — transactional email (sign-up confirmation, billing receipts). Marketing emails opt-in only.
Each sub-processor is bound by a data-processing agreement. We update this list within 30 days of adding a new one.
Your rights
You can: (a) export your account data on request, (b) delete your account at any time from the billing portal, which removes the user record and associated downloads/challenges within 30 days, (c) ask us what we have on file by emailing privacy@tradetrove.app.
Cookies
We use a single first-party session cookie (`tradetrove_session`) for authentication. We do not use tracking cookies and do not embed third-party analytics that fingerprint visitors. Privacy banners aren’t shown because there’s nothing to consent to.
Contact
Questions or data requests: privacy@tradetrove.app.