Last updated: October 6, 2026
This Privacy Policy (“Policy”) describes how Signal Trade App (“Company,” “we,” “us,” or “our”) collects, uses, processes, stores, shares, discloses, transfers, retains, and protects personal information and other data in connection with the Signal Trade App cloud service, self-hosted software package, website (signaltradeapp.com), and all related services (collectively, the “Service”).
This Policy applies to all users of the Service worldwide, including cloud subscribers, self-hosted licence holders, visitors to signaltradeapp.com, trial users, and any other individuals whose personal data we process in connection with the Service. This Policy does not apply to third-party services, platforms, or websites that may be linked from or integrated with the Service, each of which is governed by its own privacy policy.
By creating an account, subscribing to the Service, accessing the Service, or otherwise providing your information to us, you acknowledge that you have read, understood, and consent to the collection, use, processing, and disclosure of your information as described in this Policy.
For purposes of applicable data protection laws, Signal Trade App is the data controller responsible for your personal data collected and processed in connection with the Service.
When you create an account, register for the Service, or manage your subscription, we collect your full name, email address, username, hashed password (we do not store passwords in plaintext), country or region of residence, phone number (if provided), account preferences and configuration settings, and any other information you voluntarily provide during registration.
When you subscribe to the Service or make a payment, we collect and process your billing name and billing address, billing email address, payment method type, Stripe customer identifier and payment method identifiers (tokenized — Signal Trade App does not store full payment card numbers, CVVs, or complete card details, as these are processed and stored by our payment processor, Stripe), and transaction history, subscription plan details, and billing cycle information.
When you connect third-party brokerage or trading platform accounts to the Service, we collect and store trading account identifiers and metadata, encrypted OAuth tokens and API credentials for connected platforms (stored encrypted at rest using AES-256-GCM encryption with encryption keys held separately from the database), trading account configuration parameters (such as copier settings, lot ratios, and risk parameters), trading account performance statistics and operational metadata, and connection status and synchronization state information.
We do not access, store, or process your brokerage account passwords directly, as authentication with third-party platforms is handled through secure token-based mechanisms such as OAuth 2.0.
If you choose to configure the Service for use with a proprietary trading firm, evaluation account, funded account, broker challenge program, or similar third-party account, we may process account identifiers, connection status, synchronization status, copier settings, operational telemetry, error logs, and related metadata necessary to provide, secure, support, troubleshoot, and improve the Service. Signal Trade App does not use this information to guarantee, certify, or monitor your compliance with any third-party prop firm, broker, exchange, evaluation account, or funded account rules.
In connection with the operation, maintenance, support, and improvement of the Service, we automatically collect application telemetry and analytics data. This includes user interactions within the application; trading activity metadata relevant to copier operations and diagnostics (such as order replication events, synchronization status, copy latency measurements, error states, retry attempts, and copier health metrics); timestamps and event logs; system and application events for troubleshooting; and application version information and configuration state.
Telemetry data focuses on operational and diagnostic metadata, and we do not use telemetry to capture the specific financial content of your trades (such as profit and loss amounts or account equity balances) beyond what is necessary for copier operational diagnostics.
For security, fraud prevention, and account protection purposes, we collect IP addresses (IPv4 and IPv6), user-agent strings, device fingerprints, approximate geolocation derived from IP address, login attempt records (both successful and failed), session activity and session tokens, and anomalous activity indicators and security event flags.
We automatically collect technical information about your device and environment, including operating system type and version, browser type and version (for the Cloud version), screen resolution and display characteristics, device type, network connection type and quality indicators, time zone and language settings, and hardware identifiers relevant to software licensing.
We collect website and application analytics data through PostHog, including pages visited and navigation patterns, referral URLs and traffic sources, time spent on pages, click patterns, browser and device information, and approximate geographic region.
When you contact our support team or communicate with us, we collect support ticket content, subject matter, and correspondence; chat transcripts and communication records; any screenshots, logs, or diagnostic data you voluntarily provide; and communication preferences and history.
We collect content that you voluntarily submit through the Service, including free-text feedback, feature requests, suggestions, reviews, testimonials, and any other content you choose to submit.
Our website and Cloud application may use cookies, local storage, session storage, and similar technologies to maintain session state, authentication, and security; remember user preferences and settings; analyze website traffic and usage patterns; and improve Service functionality and user experience. You may manage cookie preferences through your browser settings, though disabling certain cookies may affect the functionality of the Service. Essential cookies necessary for the operation of the Service cannot be disabled while using the Service.
We use the information we collect for the following specific purposes:
This Section applies primarily to users located in jurisdictions that require a legal basis for processing personal data.
We do not sell your personal information to third parties.
We engage third-party service providers (“Sub-Processors”) to assist in delivering, operating, maintaining, and supporting the Service. These Sub-Processors process personal data on our behalf and under our instructions, subject to contractual obligations requiring them to protect the confidentiality and security of personal data and to use it only for the purposes for which it was disclosed.
Our current Sub-Processors include:
We maintain data processing agreements with Sub-Processors that contractually require them to process personal data only on our documented instructions, implement appropriate technical and organizational security measures, assist with data subject rights requests, notify us of data breaches, and delete or return personal data upon termination of the relationship. We reserve the right to add, remove, or change Sub-Processors from time to time, and material changes will be reflected in updates to this Privacy Policy.
We may disclose your information where required or permitted by law, including in response to a valid subpoena, court order, search warrant, or other lawful legal process; to comply with applicable laws, regulations, or binding governmental requests; to cooperate with law enforcement investigations or regulatory inquiries; to enforce our Terms of Service, this Privacy Policy, or other agreements; and to protect the rights, property, safety, or security of Signal Trade App, its users, or the public.
In connection with any merger, acquisition, reorganization, asset sale, financing, bankruptcy, or similar transaction, your information may be disclosed to prospective acquirers or their advisors during due diligence and transferred to the successor entity upon closing. We will provide notice of any such transfer and any choices you may have regarding your information, as required by applicable law.
We may share aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you with third parties for any lawful purpose, including research, analytics, benchmarking, and industry reporting. Such data is not subject to the restrictions in this Policy applicable to personal data.
Signal Trade App retains the perpetual, irrevocable right to anonymize, de-identify, and aggregate data collected through the Service — including telemetry data, usage data, performance data, operational data, and metadata — such that it can no longer reasonably be used to identify you or any individual user, household, or device.
Once data has been anonymized and aggregated in accordance with applicable standards, such data shall no longer constitute “personal data,” “personal information,” or “personally identifiable information” under applicable law and is not subject to the provisions of this Policy governing personal data.
Signal Trade App may use anonymized and aggregated data for any lawful purpose without restriction, obligation, or compensation to you, including internal research, product development, machine learning and artificial intelligence model training, benchmarking, and industry analysis.
Our rights under this Section survive the termination or expiration of your subscription, your account closure, and the deletion of your personal data.
Signal Trade App operates from and processes data primarily in the United States. Your personal data may be processed in countries other than your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.
Where we transfer personal data from the European Economic Area (“EEA”), United Kingdom, or Switzerland to a country not recognized as providing an adequate level of data protection, we rely on one or more appropriate safeguards, such as Standard Contractual Clauses adopted by the European Commission, the UK International Data Transfer Agreement or UK Addendum to the EU SCCs, data processing agreements with Sub-Processors incorporating equivalent protections and security requirements, or any other lawful transfer mechanism recognized under applicable data protection law. Where required, supplementary measures (including encryption and access controls) are implemented to provide additional protection for transferred data.
By using the Service, you expressly consent to the transfer of your personal data to the United States and other jurisdictions as described in this Section, and acknowledge that such jurisdictions may have different data protection standards than your country of residence.
We retain your personal information for the periods necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:
We implement and maintain appropriate technical and organizational measures designed to protect your personal information against unauthorized access, alteration, disclosure, destruction, loss, and misuse. These measures include encryption of data in transit using TLS 1.2 or higher; encryption of sensitive data at rest (including AES-256-GCM encryption for OAuth tokens with encryption keys stored separately from the database); secure hashing of passwords; role-based access controls and the principle of least privilege; network segmentation and firewall protections; security event logging and monitoring; incident response plans; and security diligence for Sub-Processors.
No method of transmission over the internet and no method of electronic storage is completely secure. While we implement commercially reasonable measures to protect your personal information, we cannot guarantee absolute security. You acknowledge that you transmit information to us at your own risk.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority in accordance with applicable data protection law (including within 72 hours where required).
You are responsible for maintaining the security of your own account credentials, devices, and network connections. You should use strong, unique passwords, enable available security features (such as two-factor authentication), and promptly report any suspected unauthorized access.
Depending on your jurisdiction, you may have certain rights regarding your personal data. We are committed to honouring your rights to the extent required by applicable law.
If you are located in the EEA, UK, or Switzerland, you additionally have the right to object to processing based on legitimate interests; the right to request restriction of processing in certain circumstances; the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you; and the right to lodge a complaint with your local data protection supervisory authority.
If you are a California resident, you have the right to know what categories and specific pieces of personal information are collected, the purposes of collection, the categories of sources, and the categories of third parties with whom information is shared; the right to delete your personal information, subject to statutory exceptions; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information (Signal Trade App does not sell personal information as defined under the CCPA/CPRA); and the right to exercise your rights without facing discriminatory treatment.
To exercise any of the rights described above, please submit a verifiable request to us at support@signaltradeapp.com. We will respond to verified requests within the timeframes required by applicable law. We may require verification of your identity before processing data rights requests.
The Service is not directed to, designed for, or intended for use by individuals under the age of eighteen (18) or the applicable age of majority in their jurisdiction (whichever is higher). We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete such information from our systems.
Some web browsers transmit “Do Not Track” (“DNT”) signals. There is currently no universally accepted standard for how companies should respond to DNT signals, and accordingly, the Service does not currently alter its data collection or processing practices in response to DNT signals.
We honour Global Privacy Control (“GPC”) signals where required by applicable law (including as an opt-out of “sale” or “sharing” under the CCPA/CPRA).
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, regulatory guidance, or other operational factors. The “Last Updated” date at the top of this Policy indicates when the most recent revision was published.
For material changes to this Policy, we will provide notice through one or more of the following means: email notification to the address associated with your account, prominent notice within the Service, or posting the revised Policy on signaltradeapp.com with a highlighted summary of changes. Your continued use of the Service following the posting of or notification about changes constitutes your acceptance of such changes.
For questions, concerns, complaints, or requests regarding this Privacy Policy or our data practices, please contact us at support@signaltradeapp.com.
Core customer and account data is stored in a PostgreSQL database hosted by Supabase; billing and payment information is processed and stored by Stripe; transactional email is delivered through Resend; product analytics are collected through PostHog; caching and session state are handled through Redis; and server-side operational logs are stored on our cloud infrastructure providers.
For Cloud Service subscribers, each user operates in a logically isolated environment. Your trading configuration data, copier settings, and operational state are isolated from other users’ environments, and telemetry and operational data collected from your environment is subject to the same privacy protections described throughout this Policy.
For Self-Hosted Software users, telemetry and diagnostic data may be transmitted from your self-managed infrastructure to Signal Trade App servers over encrypted connections (TLS). This includes licence validation and a record of each closed trade (account name, broker, instrument, side, quantity, entry and exit prices, fees, profit or loss and times, together with the licence holder’s name and email). Broker passwords and access tokens are never transmitted. The self-hosted software does not access, scan, or index files or applications on your server unrelated to the Service; does not capture screenshots, keystrokes, or screen content; and does not transmit data when the software is not actively running unless a background process is required for copier operation and you have been informed of such.
Signal Trade App does not intentionally collect sensitive personal data (also known as “special categories” under GDPR), including data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sex life or sexual orientation. If we inadvertently receive such data (for example, in free-text feedback), we will delete it upon identification unless retention is required by law.
Signal Trade App does not make automated decisions about you that produce legal effects or similarly significantly affect you based on your personal data. The Service’s copier functionality executes trades based on user-configured rules, not on profiling of individual users. Security measures (such as suspicious login detection) may involve automated processing but do not produce effects beyond temporary access restrictions pending verification.
For California residents, the following CCPA categories of personal information may be collected: identifiers (name, email, username, IP address, and device identifiers); customer records (billing information, address, and payment records); internet and electronic network activity (browsing history, interaction with the Service, and telemetry); geolocation data (approximate, derived from IP address); and inferences drawn from the above. We do not collect biometric information, protected classification characteristics, sensory data, or education information.
This Privacy Policy shall be governed by and construed in accordance with the laws of the jurisdiction in which Signal Trade App operates, without regard to any conflict of laws principles that would require the application of the laws of any other jurisdiction. Any dispute arising out of or relating to this Privacy Policy or our data processing practices that is not otherwise subject to the exclusive jurisdiction of a data protection supervisory authority shall be resolved exclusively in the courts of competent jurisdiction located in that jurisdiction.
This Privacy Policy is incorporated into and forms part of the Signal Trade App Terms of Service. In the event of any conflict between this Privacy Policy and the Terms of Service with respect to data processing practices, this Privacy Policy shall prevail.
© 2026 Signal Trade App. All rights reserved.