This Privacy Policy explains how Vaulted Desk ("we", "us", "our") — the operator of the Traders Vault desktop application and website at tradersvault.app — collects, uses, stores, and protects your personal data.
Vaulted Desk is the data controller for personal data processed in connection with the Service. Our data is stored in the European Union (Supabase eu-west-1 region), and this policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
We collect the following categories of personal and usage data:
| Category | Data Points | Source |
|---|---|---|
| Account Data | Email address, display name, account creation date, subscription tier | Provided by you at registration |
| Technical Data | IP address, operating system, app version, device identifiers | Automatically collected at login and app launch |
| Trading Account Data | Prop firm account names, account balances, daily P&L entries, target thresholds, payout records | Entered by you in the Prop Tracker and Trading Panel |
| Integration Data | Discord webhook URLs, copy-trade API credentials (encrypted), connected broker preferences | Provided by you when configuring integrations |
| Usage Data | Feature usage patterns, session timestamps, error logs, panel interaction data | Automatically collected while using the app |
| Journal & Notes Data | Daily trading notes, accountability journal entries, habit tracking data | Entered by you within the app |
We do not collect payment card details directly. Payment processing is handled by our payment provider (Stripe), which has its own privacy policy and data practices.
We process your personal data for the following purposes, each with a corresponding legal basis under GDPR:
| Purpose | Legal Basis |
|---|---|
| Account creation and management — creating your account, authenticating you, managing your subscription | Contract performance (Art. 6(1)(b) GDPR) |
| Service delivery — syncing your trading data, enabling app features, providing cloud backups | Contract performance (Art. 6(1)(b) GDPR) |
| Security & fraud prevention — detecting abuse, preventing unauthorised access, verifying identity | Legitimate interests (Art. 6(1)(f) GDPR) |
| Product improvement & analytics — understanding how features are used, identifying bugs, improving the app | Legitimate interests (Art. 6(1)(f) GDPR) |
| Customer support — responding to your queries, resolving issues, processing requests | Legitimate interests (Art. 6(1)(f) GDPR) |
| Marketing communications — sending product updates, release announcements, and promotional emails | Consent (Art. 6(1)(a) GDPR) — explicit opt-in only |
| Legal compliance — complying with applicable laws, responding to lawful requests from authorities | Legal obligation (Art. 6(1)(c) GDPR) |
Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms. You may object to this processing at any time — see Section 8.
We will only send you marketing and promotional emails if you have given us explicit, freely given, specific, and informed consent to do so.
Your choice: We will never add you to a marketing list without your opt-in consent. You can withdraw your consent and unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email we send, or by emailing support@tradersvault.com.
Withdrawal of consent for marketing does not affect:
We do not engage in unsolicited bulk marketing or sell access to your email address to any third parties for their marketing purposes.
Your personal data is stored with Supabase, our cloud infrastructure provider, in the EU (eu-west-1 region). Supabase is an EU-based provider that complies with GDPR data residency requirements.
We implement the following security measures to protect your data:
While we take appropriate technical and organisational measures to protect your data, no system is completely impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.
Some non-sensitive settings and preferences (such as theme selections and window positions) may also be stored locally on your device in a configuration file. This local data does not leave your machine.
We do not sell, rent, or trade your personal data to any third parties.
We share your data only in the following limited circumstances:
All third-party service providers we work with are required to handle your data in accordance with applicable data protection laws and are contractually prohibited from using it for any other purpose.
We retain your personal data for as long as your account is active or as long as necessary to provide the Service. Specifically:
You may request deletion of your personal data at any time by contacting us at support@tradersvault.com. We will process verified erasure requests within 30 days, subject to legal retention obligations.
Under the UK GDPR and EU GDPR, you have the following rights with respect to your personal data:
We will not discriminate against you for exercising your rights. If your request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or refuse to act on the request, in accordance with GDPR.
To exercise any of your rights listed above, or to raise a concern about how we handle your data, please contact us:
We will respond to all rights requests within 30 days of receipt. In complex cases, we may extend this to 60 days and will notify you accordingly.
We may need to verify your identity before processing your request to prevent unauthorised access to or deletion of your data.
If you are not satisfied with our response, you have the right to lodge a complaint with:
The Traders Vault website (tradersvault.app) and desktop application use minimal storage technologies. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
We use the following:
We do not use:
Because we only use strictly necessary cookies and localStorage for authentication, we do not display a cookie consent banner. If our use of storage technologies changes, we will update this policy and provide appropriate notice.
The Service is intended exclusively for users who are 18 years of age or older. We do not knowingly collect, process, or store personal data from anyone under the age of 18.
If we become aware that we have inadvertently collected personal data from a person under 18, we will take immediate steps to delete that data from our systems.
If you believe that a minor has provided us with personal data, please contact us immediately at support@tradersvault.com.
Important: The trading data, P&L figures, statistics, and analytics displayed within the Service are based on information you input or that is retrieved from third-party APIs at your request. We do not independently verify, audit, or guarantee the accuracy of any financial data.
You acknowledge and agree that:
For full details, please refer to the No Financial Advice, Assumption of Risk, and Limitation of Liability sections in our Terms & Conditions.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features of the Service.
When we make changes, we will:
Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically.
The current version is always available at tradersvault.app/privacy.
For any questions about this Privacy Policy, how we handle your data, or to exercise your data rights, please contact us:
We aim to respond to all privacy-related enquiries within 5 business days and all formal data rights requests within 30 days as required by GDPR.