Privacy Policy
Troodr is an independent personal project, not a company. This describes plainly what happens with your data if you use it - it isn't a substitute for legal advice.
What's collected
Your account email and password (handled by Supabase Auth - passwords are never visible to or stored by this app directly), and whatever you enter yourself: trades, watchlists, journal notes, criteria tags, calculator inputs, and similar. If you connect a broker or add an API key (below), the data that brings in - account numbers, positions, fills, orders - is stored too. There's no tracking or analytics beyond what's needed to keep you signed in (a session cookie).
Where it's stored
In a Postgres database hosted by Supabase. It isn't sold, shared, or used for advertising.
Connected brokers
Connecting tastytrade or Schwab is optional. When you do, the app keeps the credentials for your connection - tastytrade's grant, or your own Schwab developer app's key, secret, and login tokens - encrypted (AES-256-GCM) rather than as plain text, and uses them to sync your accounts, positions, and transactions into your journal. Orders are only ever placed when you submit one yourself. Disconnecting deletes the stored credentials; trades already imported stay in your journal as your own records.
Your API keys and links
If you add an Unusual Whales API key, it's stored encrypted the same way and used only from the server to fetch options-flow data on your behalf - by ticker, never with your trades or journal attached. You can remove it anytime in Settings. A saved TradingView layout link is stored only so "Open in TradingView" can open it.
Payments
Subscriptions are handled by Stripe - card details go straight to Stripe and never touch this app. What's kept here is your Stripe customer ID and your plan, subscription status, and renewal date.
Besides sign-in emails, the only email sent is an optional digest of new options-flow alerts, delivered to your account email through Resend. You can turn it off in Settings.
Third-party market data and embeds
Pages look up public market data (prices, breadth, fundamentals, economic series, options flow) from sources such as Yahoo Finance, Schwab's Market Data API, FRED, tastytrade, Unusual Whales, and Stockbee's Market Monitor. Those lookups are by ticker symbol or date only - your account information, trades, or journal entries are never sent to them. Some pages embed content served directly by others - TradingView charts, and the IV Plot and Seasonality apps hosted on shinyapps.io - and those services may set their own cookies under their own privacy policies.
Data removal
You can disconnect a broker and remove API keys yourself in Settings. Beyond that, this is a personal project without a dedicated support channel or a self-serve account deletion feature at this time. Keep that in mind before signing up with data you'd want reliably erasable on demand.
Changes
This page may change as the app changes. There's no notification system for updates - check back if you're curious.