Privacy Policy

Account data: email address, display name, and optional profile preferences (default risk, default instrument, city, trader type).

Usage data you create: position size calculations, saved presets, order records routed through a connected broker, and the risk statistics derived from them.

Order confirmation records: when you confirm and route an order, we record the confirmation timestamp, the order parameters you confirmed, and the IP address and country the confirmation came from. This audit evidence demonstrates that each routed order was authorized by a person.

Broker credentials: the API username and API key you choose to connect, plus short-lived broker session tokens.

Billing: handled entirely by Stripe. Our database stores only opaque Stripe identifiers and subscription status. We never receive or store card numbers or billing addresses.

We never store broker account passwords or multi-factor authentication codes, and we never request them.

Broker API keys and session tokens are encrypted at rest with AES-256-GCM before they are written to the database. The encryption key is derived per user from a server-side secret combined with a random salt unique to that user's connection, so no single stored value unlocks another user's credentials. The secret lives only in the server environment and is never present in browser code.

Credentials are decrypted only inside server-side code, only to authenticate a request you initiated, and are never returned to the browser. All traffic is encrypted in transit with TLS.

We request the minimum broker permissions required — read balance, read order history, and place orders. We do not request, accept, or use withdrawal or transfer permissions, and we never hold or move user funds.

To operate the product: calculate sizes, route orders you submit, render your historical dashboard, manage your subscription, and send transactional emails (verification, trial reminders, receipts).

We do not sell, rent, or share your trading data with market makers, brokers, data brokers, advertisers, or any other third party. We do not use your order flow for any purpose other than showing it back to you.

Data is hosted on US-based infrastructure. Access is restricted to the small number of personnel required to operate the service, and trade history is stored separately from identity records. Row-level security scopes every record to its owner, so one account can never read another's logs, orders, or credentials.

Subprocessors: Supabase (database, authentication), Cloudflare (hosting and delivery), Stripe (payments), and our transactional email provider.

If a free trial expires without a subscription, we automatically and permanently delete the encrypted broker API keys and session tokens 14 days later, and the stored broker order history 30 days later. Records are deleted, not merely flagged inactive.

Remaining data is kept until you delete it or delete your account. Minimal billing records may be retained where required for tax and accounting purposes.

Profile → Data & Privacy contains two one-click controls: "Disconnect all brokers & delete data," which immediately purges every broker connection, order record, and calculation log, and "Delete my account," which permanently erases your account and all associated data.

Users in jurisdictions granting rights of access, correction, portability, or erasure (including GDPR, UK GDPR, PIPEDA, and US state privacy laws) may exercise them through these controls or by contacting us. Trade and order history is treated as personal data regardless of whether it is tied to a real-world name.

admin@propersizing.com — Proper Sizing LLC.