Privacy Policy

Guard My Trade ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our desktop application, NinjaTrader add-on, and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Name and email address
• Password (stored in hashed format)
• Account preferences and settings

1.2 Brokerage Credentials

To connect to your trading accounts, we may collect brokerage API credentials. These credentials are:

• Encrypted using AES-256 encryption
• Transmitted only over TLS/SSL secured connections
• Used solely for executing trades you authorize
• Deleted immediately upon account deletion or credential removal

1.3 Trading Activity Data

We collect information about your trading activity, including:

• Trade history (symbols, quantities, order types, timestamps)
• Position information and P&L data
• Rule configurations and enforcement logs
• TradingView webhook payloads (if configured)

1.4 Device and Usage Information

We automatically collect:

• Device identifiers and machine ID
• Operating system and application version
• IP address and approximate location
• Application usage patterns and feature interactions
• Error logs and crash reports

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Execute trades, enforce trading rules, and deliver behavioral insights
• Improve the Service: Analyze usage patterns to enhance features and user experience
• Communicate: Send important service updates, security alerts, and support messages
• Ensure Security: Detect and prevent fraud, abuse, and unauthorized access
• Comply with Law: Meet legal obligations and respond to lawful requests

3. Data Retention

• Trading logs: Retained for 90 days for operational purposes, then aggregated or deleted
• Account data: Retained while your account is active and for 30 days after deletion
• Brokerage credentials: Deleted immediately upon removal or account deletion
• Behavioral insights: Retained while your account is active to provide ongoing analysis

4. Information Sharing

We do not sell your personal information. We may share information only in the following circumstances:

4.1 Service Providers

We work with trusted third parties who assist in operating our Service:

• Cloud hosting providers (for data storage)
• Authentication services (Supabase)
• Analytics services (to improve the Service)

4.2 Brokers

We share only the minimum information necessary to execute your trades with your connected brokers (e.g., NinjaTrader, Tradovate, Rithmic).

4.3 Legal Requirements

We may disclose information when required by law, court order, or government request, or to protect our rights, safety, or property.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email before your information becomes subject to a different privacy policy.

5. Data Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption for sensitive credentials
• TLS/SSL encryption for all data transmission
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Secure credential storage with automatic expiration

Important: No security system is impenetrable. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Cookies and Tracking

Our website and Service use cookies for:

• Essential cookies: Required for authentication and security (always active)
• Preference cookies: Remember your settings and preferences
• Analytics cookies: Help us understand how the Service is used

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Service functionality.

7. Your Rights

7.1 All Users

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing communications

7.2 EEA Residents (GDPR)

If you are in the European Economic Area, you have additional rights:

• Right to restriction of processing
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

7.3 California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information is collected
• Know whether your information is sold or disclosed
• Opt out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your rights

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: