Privacy policy

Draft — not yet reviewed by counsel

This document is a working draft and isn't legal terms in effect. It requires review by qualified counsel before TopTickr launches commercially.

What we collect

Waitlist: your email address and, if you give it, your phone number. If you tick the texting box we also keep a record of your consent: the exact wording you agreed to, the date and time, and the IP address and browser you used. Accounts (invite-only beta): email, name, hashed password, account dates, your paper-trading activity and settings, and, if you add one, your market-data API key, stored encrypted and never shown again. Devices (desktop app): a random installation ID, the device name, operating system and app version, and last-seen time. We do not use hardware fingerprinting.

Text messages

We only text numbers whose owners ticked the texting box. Texts are about TopTickr's launch. Reply STOP to any message to opt out, or HELP for help. When we start sending texts we'll use a messaging provider (Twilio) to deliver them, and it will process your number only to do that. We never sell or share your phone number or your texting consent with anyone for their own marketing.

Who we share data with

Service providers that run TopTickr for us: hosting (Railway), database (Supabase), market data (Databento, using your own key), AI explanations (Anthropic; no personal information is sent), and, once we start messaging, email (Resend) and texts (Twilio). We don't sell personal information.

What we never collect

Brokerage passwords. If we ever connect to a trading platform, only a revocable access token is stored, encrypted.

Why we use data

To run the waitlist and tell you about the launch, provide the service, prevent abuse (for example, automated sign-ups), provide support and meet legal obligations.

Your choices

To be removed from the waitlist, to stop texts, or to ask what we hold about you or have it deleted, email privacy@tradetoptickr.com (or reply STOP to stop texts).

Retention and rights

[Counsel to finalize: retention periods, deletion and access requests, applicable U.S. state privacy laws.]

Analytics

Any product analytics will be aggregate, disclosed here first, and possible to opt out of.