Privacy Policy
Last updated: July 31, 2026
Beta product. Data handling practices may evolve as TradePilot matures. Material changes will be announced on this page.
What we collect
- Your email address (required for sign-in).
- Optional profile info you provide at signup: first/last name, phone, how you heard about us, and your trading focus / experience answers.
- Broker credentials for brokers you choose to connect — stored encrypted at rest.
- Trading activity generated inside TradePilot: strategies, backtests, orders, trades, journal entries, webhook events.
- Basic request metadata (IP address, user-agent) for security and abuse prevention.
How we use it
- Authenticating you (magic-link sign-in) and keeping your session secure.
- Executing trades and syncing account state with brokers you've connected.
- Product improvement — understanding what people use, fixing what breaks.
- We do not sell your personal data. We do not sell your trading activity.
Third parties
- Resend — sends sign-in emails.
- Vercel — hosts the app and stores logs.
- Neon / Postgres — stores your account and trading data.
- Brokers you connect (Alpaca, Tradovate, Schwab, etc.) — receive the orders you place through TradePilot, under their own terms.
Data retention
We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we're required to keep records for legal / tax reasons.
Your rights
You can export your trades from the reports page, and you can delete your account at any time from settings. If you're in a jurisdiction with additional privacy rights (GDPR, CCPA, etc.), email privacy@tradepilot.me to exercise them.
Cookies
We use a single session cookie for authentication (httpOnly, SameSite=lax). No third-party ad or tracking cookies.
Contact
Questions? Email privacy@tradepilot.me.