TradePilotX Privacy Policy

We collect only what is needed to operate the platform:

• Account information: email address, display name, authentication identifiers, and role assignments.
• Usage information: pages viewed, features used, requests to our servers, and error diagnostics.
• Support information: messages, tickets, and contact form submissions you send us.
• Billing information: subscription status, plan, and payment identifiers returned by our payment processor.

Your account is created and secured through our authentication provider. Passwords are stored as salted hashes by that provider; TradePilotX staff cannot read your password.

Brokerage authentication happens through third-party brokerage and connection infrastructure, including SnapTrade and the brokerage you choose. When you connect an account through SnapTrade, you authenticate directly with your brokerage in their interface.

• TradePilotX does not receive or store your brokerage username or password.
• TradePilotX stores connection identifiers and an encrypted per-user connection secret so we can request your data on your behalf.
• Where an integration requires API credentials that you supply yourself, those values are encrypted at rest and are only decrypted inside server-side code.
• You can disconnect a brokerage at any time, which revokes our ability to request further data.

Once connected, we may receive account balances, buying power, positions, orders, and transaction history from your brokerage. This information is displayed to you, used for risk checks and analytics, and is never sold. When a brokerage does not return a value, we label it as unavailable rather than estimating it.

• To operate, secure, and support the platform.
• To display your portfolio, orders, positions, and account health.
• To run risk checks before any order is prepared or submitted.
• To process subscriptions and provide access to paid features.
• To communicate service, security, and billing notices.

Market data, indicators, and (where relevant) de-identified context may be sent to AI model providers to generate analysis and scoring. AI output is informational only, can be inaccurate, and is not financial advice. We do not use your brokerage credentials in AI requests.

• Encryption in transit using HTTPS/TLS.
• AES-256-GCM encryption at rest for stored connection secrets.
• Row-level security so records are readable only by their owner or an authorized administrator.
• Secrets held server-side only; they are never sent to the browser, embedded in URLs, or written to logs.

No system is perfectly secure. We make no claim to any certification or compliance program that we have not completed.

We keep account, billing, and audit records for as long as your account is active and for the period required to meet legal, accounting, and dispute-resolution obligations. Market and analytics data is retained on a rolling basis. Deleting a brokerage connection removes its stored connection secret immediately.

We use strictly necessary cookies and local browser storage to keep you signed in and to remember interface preferences. We do not use third-party advertising cookies.

• Brokerage and API providers: your chosen brokerage (for example Webull) provides account, market, and order data under its own terms and privacy policy.
• SnapTrade: provides brokerage connectivity and handles brokerage authentication. TradePilotX does not own or operate SnapTrade.
• Stripe: processes subscription payments. Card details are handled by Stripe, not by TradePilotX.
• Cloud hosting, database, and authentication providers: host the application and store your data.
• Email and notification services: deliver transactional messages such as sign-in, billing, and support replies.
• AI model providers: generate market analysis from the data described above.

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal information, and to object to certain processing. Submit requests through our contact page and we will respond within a reasonable period.

You can request deletion of your account at any time. On deletion we remove your profile, settings, stored connection secrets, and brokerage links, and we revoke connectivity with SnapTrade. Records we are required to keep (such as billing and audit history) are retained for the legally required period and then removed.

If you believe you have found a vulnerability, contact us through the contact page with the category set to Security. Please do not disclose the issue publicly before we have had a chance to respond.

TradePilotX is not directed to anyone under 18. We do not knowingly collect information from children. If we learn that we have, we will delete it.

We may update this policy. Material changes will be posted here with a new effective date, and continued use of the platform after the change means you accept the updated policy.

Use the contact page to reach us about privacy matters. If a production support email has not yet been configured for this deployment, the contact form is the correct channel.