The desk keeps a ledger of everything it does on your behalf, so it necessarily keeps a record about you too. This page lists what is collected, why, who else sees it, and how long it is kept.
What we collect
Account info: name, username, email, and password (handled by our auth provider, Supabase — we never see or store your raw password). Your referral code and who referred you.
Trading connection: your PickMyTrade webhook token, stored encrypted, used only to relay orders on your behalf. We never store your Tradovate login or any broker credential directly.
Desk activity: the signals that reach the desk, the sim and live fills recorded from them, your sizing and risk settings, any broker fill statements you choose to upload for reconciliation, and any private hand notes you write (those are yours — not visible to admins).
Suitability answers: when you complete onboarding we ask about your trading experience and your financial situation — annual income, monthly expenses, and how much capital you can afford to put at risk. These are stored as brackets (for example “$50–100k”), never as exact figures, and are used to check that futures trading is appropriate for you and to size the risk warnings you see.
The rest: support messages you send us, and a referral-attribution cookie (toth_ref, 30 days) set when you follow an invite link.
Why
To run the desk: authenticate you, compute sizing and risk figures against your own settings, relay and log signals, show you your own performance, and let you journal your own trades. To reach you: heartbeat and fill alerts, and a weekly digest — off by default, opt-in, and stripped of any other member's name before it's sent. To keep the desk working: error monitoring when something breaks.
Who it's shared with
Only the services that make the desk function — never sold, never used for advertising:
- Supabase — accounts and the database.
- PickMyTrade — routes your relayed orders to Tradovate.
- Tradovate — the brokerage account you connect and control directly.
- Resend — sends desk emails (alerts, digests, support replies).
- Vercel — hosts the desk.
- Sentry — receives error reports when the app crashes, to help us fix it.
How it's protected
Your PickMyTrade token is encrypted before it's stored; the encryption key lives only in server environment variables, never in the codebase. Database access is scoped per-user with row-level security, so one member's ledger is not reachable from another member's session. That rule is enforced by the database itself rather than by the interface. Everything travels over HTTPS.
Your data is stored on infrastructure operated by Supabase and Vercel, hosted in the United States. No system is immune to breach. If we discover one that affects your account data, we will email the address on your account and post a notice on the status page describing what happened and what to do about it.
How long we keep it
Signal and fill history is kept as a standing ledger, sim and live, and it is our policy never to reset or rewrite it: a record you can trust only works if nobody gets to edit the parts they dislike. One honest caveat, because the risk disclosure says the same thing and the two documents should agree: the desk is actively developed software, and while we do not reset ledgers deliberately, a defect or an infrastructure failure could still lose data. Your broker's statements remain the authoritative record of your account. Account info is kept while your account is active. You can ask us to delete your account and personal information at any time. Ledger rows tied to your account are anonymized rather than deleted outright, so the platform-wide activity counts shown to logged-out visitors stay accurate.
Your rights over your data
Wherever you live, you can ask us for a copy of the personal data held about you, ask us to correct anything inaccurate, ask us to delete your account and personal information, or object to a particular use. If you are in the UK, EU, or a US state with its own privacy law such as California, those requests are rights you hold under that law rather than favours we grant. Email the address at the bottom of this page and we will respond within 30 days. We do not sell personal information and do not share it for cross-context behavioural advertising.
Your choices
The weekly digest is opt-in and off by default — turn it on or off from your profile. You can revoke the PickMyTrade connection at any time, which stops the desk from relaying anything further. You can ask us to export or delete your data by writing to the address below.
Cookies
We use the session cookie our auth provider sets to keep you signed in, and a 30-day toth_ref cookie to credit an invite link if you sign up later. No third-party advertising or tracking cookies.
Age
The desk isn't intended for anyone under the legal age to hold a futures brokerage account in their jurisdiction (18 in most places). We don't knowingly collect information from minors.
Changes
If this policy changes, we'll update the date at the top. We won't start using existing data in a materially new way without saying so here first.
Contact
Data requests or privacy questions: andrewlheras@gmail.com.