Privacy

What we store

Everything below is stored in your own account and is only visible to you when you are signed in.

• Account details: your name, email address and, if you entered it, your birthdate.
• Trading data: the trades you log or import, including entry and exit, size, fees, stop-loss, take-profit, notes, screenshots and your self-graded reflection scores.
• Journals and personal notes you write, plus your playbooks, accounts, instruments, goals and watchlist.
• Dashboard settings: your layout, hidden blocks and preferences, so your setup follows your account across devices.
• Biometrics, if you connect them: heart rate, resting heart rate, HRV, sleep and respiratory rate. These are health data and are only stored when you set up the connection yourself.
• Individual timestamped readings, when your export app sends them: each heart rate, HRV or breathing measurement with the moment it was taken. This is what lets a trade show the reading around its entry and exit. It is more detailed than a daily average, and it stops arriving the moment you withdraw your consent or stop the connection.

If you subscribe to the newsletter

Subscribing is separate from having an account, and it is never a condition for anything else. We store this, and only for as long as you are on the list:

• Your email address, and your first name if you filled it in.
• Proof that you agreed: the exact sentence you agreed to, the moment you signed up, the moment you confirmed, plus your IP address and browser identification. We keep this because the burden of proving consent is on us.
• You confirm by email before we ever send you anything, so nobody can put your address on the list but you.
• Every email has a working unsubscribe link, and one click is enough. Your address is not deleted after unsubscribing: we mark it as unsubscribed and keep the row, because deleting it would let the same address walk back in through an import and get mailed again.

Where it is stored

Your data lives in a Supabase Postgres database with row-level security, which means database rules restrict every row to the account that owns it. The application is hosted on Vercel.

Third parties we send data to

SLD only contacts these services for the features they power:

• Anthropic (Claude): when you use the AI coach or an AI insight, the relevant trading and biometric summary is sent to generate that answer.
• Resend: sending account and notification emails.
• Market and news data: Yahoo Finance, Finnhub, Stooq, CryptoCompare, Alpha Vantage, StockTwits and Forex Factory. These are requested by the server for prices and calendar events; your personal data is not sent to them.
• Broker connections you set up yourself: MetaApi (MetaTrader), Tradovate, TopstepX and TradeLocker. Credentials you enter are stored server-side to run the sync you ask for, and are never shown back in the interface.

Biometrics are optional

Biometrics only arrive if you connect Apple Health through an export app and set a schedule there. SLD cannot read your phone by itself, readings arrive on that schedule, and you can stop the connection at any time. How detailed they are is set in that app: send one value per day and that is all SLD has, send individual measurements and a trade can be matched to the reading closest to it.

Your data, your control

You can edit or delete any trade, journal, note, goal, session or connection from inside the app, and deleting it removes it from the database. If you want your whole account and everything in it removed, email us and we will delete it.

No ads, no data selling

SLD does not show ads and does not sell or share your trading or health data with advertisers or data brokers.

Contact

Questions about your data, or a deletion request: mail@stoplossdivision.com