Privacy Policy

• Email address, used to create and identify your account.
• Password, which is hashed using industry-standard cryptographic methods by our authentication provider, Supabase, before storage. We never store your password in plaintext.

• The credentials and access tokens required to connect your brokerage account(s) to the Service, which may include your broker login email address, server/environment designations, and API access tokens issued by the broker.
• These credentials are stored solely for the purpose of maintaining your broker connection and retrieving your trading data. They are encrypted at rest and in transit.
• We currently support TradeLocker and will expand to support additional brokers over time. The same practices described here apply to all supported broker integrations.

Once you connect a broker account, we retrieve and store the following data from that account:

• Trade history, including individual trade records with entry and exit prices, timestamps, instruments, and volumes.
• Open and closed position data.
• Account balance, equity, margin, and profit and loss (P&L) information.
• Any other data made available through the broker's API that is relevant to the features of the Service.

• Trade journal entries, including notes, tags, ratings, and trade intentions you record within the Service.
• Custom rules you create and configure for the Execute Mode automation feature.
• Discipline scores, challenge progress tracking data, and accountability partner connections.

• Push notification tokens issued by your browser or device when you opt in to trade alerts, used solely to deliver alerts to you.

• Log data: IP address, browser type, device type, operating system, referring URL, pages accessed within the Service, and timestamps of access.
• Session data: Session identifiers maintained through session cookies used for authentication. We do not use persistent tracking cookies.

We do not use third-party analytics trackers, advertising networks, or behavioral profiling services.

• Authenticate your account and maintain your session.
• Connect to your broker account(s) to retrieve trading data and display it within the Service.
• Execute automated trade actions on your behalf when you have enabled Execute Mode.
• Display your trading data, performance analytics, and account metrics within the dashboard.
• Deliver push notifications for trade alerts you have enabled.
• Process your subscription and billing through Stripe.

• Analyze usage patterns to identify and resolve technical issues.
• Develop, test, and improve features of the Service.
• Conduct internal research and product development.

THIS SECTION IS IMPORTANT. IT DESCRIBES HOW WE USE DATA DERIVED FROM YOUR TRADING ACTIVITY IN WAYS THAT EXTEND BEYOND OPERATING YOUR ACCOUNT.

We collect and retain all trading data submitted by or pulled on behalf of users. In addition to using data to operate your individual account, we use anonymized and aggregated data — from which all personally identifiable information has been removed — for the following purposes:

• Platform benchmarking: We generate anonymized platform-wide statistics and benchmarks that may be displayed within the Service to show you how your trading performance compares to aggregated platform averages. No individual user is ever identifiable in these benchmarks.
• AI and machine learning model training: We use anonymized, aggregated trading data to train, fine-tune, validate, and operate AI and machine learning models. These models power features such as personalized trade coaching, pattern recognition, trade analysis, risk profiling, and predictive analytics. By accepting our Terms of Service, you consent to your anonymized data being used for AI and ML training.
• Third-party data licensing: We may license or sell anonymized, aggregated trading insights and datasets to third parties, including proprietary trading firms, financial data companies, quantitative research institutions, and technology companies. Only data from which all personally identifiable information has been fully removed will ever be shared or sold. No individual user will ever be identifiable in any data shared or sold to third parties.

This extended use license survives account deletion. Data that has been anonymized and aggregated such that it cannot reasonably be used to identify you as an individual is not subject to deletion requests.

• We send transactional emails as necessary to administer your account, including registration confirmations, password resets, billing receipts, and material policy update notifications.
• We do not send unsolicited commercial marketing emails.

We share data with the following service providers who assist us in operating the Service:

• Supabase: Our database and authentication provider, which stores your account data. Supabase is a U.S.-based company and processes data in accordance with its own privacy and security practices.
• Vercel: Our cloud hosting and serverless function infrastructure provider, which operates our application. Vercel is a U.S.-based company.
• Stripe: Our payment processor, which handles all subscription billing. Stripe receives your payment card information directly and processes it in accordance with Stripe's privacy policy. Centage does not receive or store full card numbers.
• Connected Brokers (TradeLocker and future broker integrations): We transmit your broker credentials and API tokens to your connected broker's systems in order to authenticate and retrieve your trading data. This transmission is made on your behalf and at your direction.
• Web Push API / Browser Notification Infrastructure: Push notifications are delivered through browser notification services, which may route through the notification infrastructure operated by browser vendors such as Google (for Chrome) or Mozilla (for Firefox). We transmit only your push notification token and the notification payload.
• AI and ML Service Providers (future): We may engage third-party AI or ML providers to power coaching and analytics features. Any such providers will be identified in an updated version of this Policy before they are integrated.

We may share or sell anonymized, aggregated datasets that do not contain personally identifiable information as described in Section 2.3. No individual user is ever identifiable in such data.

We may disclose your personal information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, or legal process; (b) respond to a valid legal request from a government authority; (c) protect the rights, property, or safety of Centage, our users, or others; or (d) enforce our Terms of Service.

If Centage Trading LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice within the Service of any such change in ownership and the choices available to you regarding your personal information.

We retain your personally identifiable information for as long as your account is active and for a reasonable period thereafter to fulfill our legal obligations, resolve disputes, and enforce our agreements. If you delete your account or submit a verified deletion request, we will delete your personally identifiable information — including your email address, broker credentials, and identifiable account records — within 30 days.

Centage retains all historical trading data retrieved from connected broker accounts on its servers regardless of the subscription tier through which a user accessed that data. The ability to view historical trade data within the Service interface is a subscription feature (30 days on Free, unlimited on Pro and Elite), but the underlying data is retained on Centage's servers independently of your current plan status.

Anonymized and aggregated data derived from your activity — from which all personally identifiable information has been removed — may be retained by Centage indefinitely. This data is not subject to deletion requests because it cannot reasonably be used to identify you as an individual.

After your personally identifiable data is deleted, we retain only: (a) anonymized, aggregated data as described in Section 7.3; and (b) records required by law or for legitimate business purposes such as fraud prevention and dispute resolution, retained only for the minimum period required.

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers: Email address, IP address, account identifiers.
• Internet or other electronic network activity: Log data, session data, usage information.
• Financial information: Account balance, P&L, and trading account data (but not payment card data, which is processed by Stripe).
• Inferences drawn from personal information: Performance analytics, discipline scores, and platform benchmark comparisons.

We collect personal information directly from you (during registration and use), automatically from your device and browser, and from your connected broker accounts (with your authorization).

We collect personal information for the purposes described in Section 2 of this Privacy Policy.

We share personal information with service providers (Supabase, Vercel, Stripe, connected brokers, notification infrastructure providers) for purposes of operating the Service, as described in Section 4. We do not share personally identifiable information with third parties for their own independent marketing purposes.

Centage does not sell your personally identifiable information. We do not sell your name, email address, broker credentials, or any information that can be traced to you individually. Anonymized, aggregated trading data that cannot reasonably identify you is not “personal information” for purposes of the CCPA and may be licensed or sold as described in Section 2.3.

As a California resident, you have the following rights under the CCPA:

• Right to Know: You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purposes for collecting it, and the categories of third parties with whom it has been shared.
• Right to Delete: You have the right to request deletion of the personal information we have collected from you, subject to certain exceptions. We will fulfill verified deletion requests within 45 days (with a possible 45-day extension, for which we will provide notice).
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. We will not deny you services, charge you different prices, or provide you a different level of service solely because you exercised your privacy rights.

To exercise any of your California privacy rights, you or your authorized agent may submit a verifiable consumer request by emailing info@centagetrading.com with the subject line “California Privacy Rights Request.” We will respond to verified requests within 45 days of receipt.