Privacy policy
Last updated:
This policy explains what data Trading Monitor (this site, the web platform and the mobile app) keeps, what it is used for and how you can ask for a copy or delete it.
1. Data we keep
- Your account: email and password. The password is stored only as a bcrypt hash.
- MetaTrader 4 data, sent by the EA installed in your terminal: account number, broker, server and currency; balance, equity and margin; open positions and trade history (symbol, volume, prices, result, magic number and comment); deposits and withdrawals. The EA only reads: it never opens, closes or modifies trades.
- Your settings: risk limits, strategy names and the alerts raised.
- Notifications: if you connect Telegram, the chat id; if you turn on notifications in the app, the device token assigned by Firebase Cloud Messaging.
- Language: the language you pick on the platform or in the app, so alerts are written in it.
- Access keys: EA keys and the tokens you create for AI assistants are stored only as hashes.
- Technical logs: the server records the IP address and the requests it receives, for security and to limit sign-in attempts.
We use no advertising, analytics or tracking tools, and we never sell or share your data.
2. What we use it for
- Computing your account metrics and the usage of each risk limit.
- Sending you alerts when a rule reaches 80 % or goes past its limit, and when the EA stops reporting.
- Showing your data on the platform, in the app and in the AI assistants you connect.
- Protecting the service against unauthorized access.
3. Third-party services
- Telegram, only if you connect it: alerts are sent as messages to the linked chat. Telegram handles those messages under its privacy policy.
- Firebase Cloud Messaging (Google), only if you turn on notifications in the app: it receives the device token and the text of each alert in order to deliver it. Google handles it under its privacy policy.
- Resend, to send email: the password reset link when you ask for it and email alerts if you turn them on. It receives your email address and the message text, and handles them under its privacy policy.
- AI assistants (MCP), only if you create a token and connect an assistant: the assistant reads your data with that token, and what it does with it is governed by its provider's policy. You can revoke the token at any time in Settings.
- Hosting provider: the server that runs the API and the database.
4. Security
Every connection uses HTTPS. Sessions expire and are signed with a server key. EA keys are unique per account and can be revoked. The server limits sign-in attempts.
5. How long we keep it
As long as your account exists. Deleting it removes all related data at once: trading accounts, trades, limits, alerts, notification channels and tokens.
6. Your rights
You can ask for a copy of your data, correct it or delete it. Deletion is done from the app or the platform; the steps are in Delete account. For anything else, write to praunthomas@gmail.com from your account's email.
7. Cookies and local storage
This site uses no cookies. It stores the language you pick in your browser. The web platform stores your session in your browser, and the app stores it in the device's secure storage.
8. Children
Trading Monitor is for people aged 18 or over and does not knowingly keep data about minors.
9. Changes
If we change this policy we will update the date above. If the change is significant, we will tell you by email or in the app.