TRADING FLOOR

Privacy Policy

Effective date: [EFFECTIVE DATE] · Last updated: [DATE]

This Privacy Policy explains how KennyTrades LLC, doing business as Trading Floor ("Trading Floor", "we", "us"), collects, uses, and protects information when you use the website and services at tradingfloor.me (the "Service"). By using the Service you agree to this Policy.

Trading Floor is a software tool, not a broker, exchange, or financial advisor. We do not hold your funds or place trades on our own behalf. Trades are executed on your own third-party brokerage accounts at your direction.

1. Information we collect

Account information. A username/email and a password, which we store only as a salted hash (PBKDF2) — we never store your password in plain text.
Brokerage authorization. When you connect a Tradovate login via OAuth, we receive and store an access token on your behalf. We do not receive or store your Tradovate username or password. The token is stored encrypted and is used only to read your accounts and place the orders you configure.
Trading data. Account identifiers, positions, orders, fills, contract symbols, quantities, and profit/loss figures retrieved from your connected accounts to power copying, the journal, and shareable cards.
Configuration. Your copy settings, leader/follower assignments, risk limits, and groups.
Payment information. Subscriptions are processed by Stripe. We do not store your full card number; Stripe handles payment data under its own privacy terms.
Support chat content. Messages you send to our in-app AI support assistant are processed to generate a response (see "AI support assistant" below).
Usage and device data. Log data such as IP address, browser type, timestamps, and pages viewed, plus a session cookie used to keep you logged in.

2. How we use information

To operate the Service — authenticate you, connect your accounts, mirror trades you configure, and display your journal and statistics.
To process subscriptions and billing.
To provide customer support and respond to inquiries.
To maintain security, prevent abuse, debug, and improve the Service.
To comply with legal obligations.

We do not sell your personal information, and we do not show third-party advertising in the Service.

3. Shareable P&L cards

If you generate a shareable card, the figures in that card and a verification page become accessible to anyone who has the unique link or scans its QR code, until you delete it. Only the data shown on the card is exposed; we do not publish your account numbers or login. Do not share a card if you do not want its figures to be public.

4. AI support assistant

Our in-app support chat is powered by a third-party AI provider (Anthropic). When you use it, the messages you type and limited context about your question are sent to Anthropic's API to generate a reply, subject to Anthropic's terms and data policies. Please do not enter passwords, full card numbers, or other sensitive credentials into the chat.

5. Service providers / sub-processors

We share information only with providers that help us run the Service, including: Tradovate / NinjaTrader (brokerage connectivity), Stripe (payments), Anthropic (AI support chat), and our hosting/infrastructure provider. Each processes data on our behalf under their own terms.

6. Data retention

We retain your account and configuration data while your account is active. You may request deletion of your account and associated data (see "Your rights"). Some records may be retained as required for legal, tax, or fraud-prevention purposes.

7. Security

We use measures such as password hashing, encryption of stored broker tokens, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Depending on your location (e.g., GDPR or CCPA), you may have the right to access, correct, delete, or export your personal data, or to object to or restrict certain processing. To exercise these rights, contact us at support@tradingfloor.me. You may disconnect a broker connection at any time from the Connections screen, which revokes our stored token.

9. Children

The Service is not directed to anyone under 18, and we do not knowingly collect information from children.

10. International users

The Service is operated from [JURISDICTION]. If you access it from elsewhere, your information may be transferred to and processed in [JURISDICTION].

11. Changes

We may update this Policy from time to time. Material changes will be posted here with a revised effective date.

12. Contact

Questions about this Policy: Trading Floor, support@tradingfloor.me.