Privacy Policy
Last updated 2026-10-16
This Privacy Policy explains what information TraderXian (“we”, “us”, “our”) collects when you use TradeX, how we use and share it, and the choices and rights you have. TradeX means the trading desk at app.traderxian.com (the “Desk”), the TraderXian Connector for Windows (the “Connector”), our account service, the ICT Replay tool, the website traderxian.com and the bot in our Discord community (together, the “Services”). We are the controller of the personal information described here.
1. Information that never reaches us
- Broker passwords. You sign in to Tradovate on Tradovate’s own sign-in page, which the Connector opens. Your Rithmic username and password are entered in the Desk and passed only to the Connector on your computer, which stores them encrypted on that computer. Our servers never receive or store them.
- Broker tokens and sessions. These stay on your computer: the Desk keeps them encrypted in your browser, and the Connector keeps them in memory and in an encrypted file on your computer.
- Trading requests and chart data. These travel directly between your computer and your Broker and do not pass through our servers.
2. Information we collect
| Category | What it is | Why we need it |
|---|---|---|
| Account | Your email address; a hash of your password (scrypt; the password itself is never stored); your two-factor secret (encrypted) and hashes of your recovery codes; the version of our legal terms you agreed to and when | Sign-up and sign-in, account security, a record of your agreement |
| Devices and sessions | Device name and model, the device’s public key, when it was added and last active; Connector pairing records | Recognising your devices, the device limit, removing devices |
| Access Time and purchases | Use of Activation Codes and your expiry dates; for purchases through Whop, the payment ID, plan, amount, currency, time and the email used at checkout; for earlier USDT purchases, the amount, receiving address and transaction hash | Providing and renewing access, accounting, preventing fraud |
| Execution ownership | Which of your devices executes which Broker Account (account identifiers) | Making sure only one device trades an account at a time |
| Synced data | Chart layouts, Groups, Desk settings and watchlists; for Tradovate logins, the environment, display name and user number (never tokens) | Keeping your devices in step |
| Fills | Fills uploaded by the Connector: account, contract, side, quantity, price and time | Your fill history in the Desk, with filters and export |
| Account summaries | Balance, equity, profit and loss for the day, and positions, uploaded by the Connector | Answering your position and profit-and-loss commands in Discord |
| Alerts | Alerts raised by the Connector: type, content and delivery status | Sending them to you as Discord direct messages |
| Connector health | Connector version, last heartbeat, number of logins it watches, error codes | Spotting a Connector that is offline or failing |
| Error reports from the Desk | Where an error happened, its code, the component and the Desk version; never message text or trading data | Fixing bugs |
| Community | Your Discord user ID and name, points history, check-ins and replay submissions (links), redemptions, warnings and timeouts, role status | Community features and moderation |
| Security records | Sign-ins, device changes, pairing and administrative actions, with a one-way hash of the IP address | Security auditing and preventing abuse |
We do not sell your personal information and do not share it for advertising. The Desk, the Connector and the website show no advertising and use no third-party analytics.
3. How we use information
- To provide the Services you asked for: your account, devices, Access Time, sync, fills and alerts.
- To keep the Services and your account secure, and to prevent fraud and abuse.
- To process purchases and keep accounting records.
- To send service emails, such as verification codes, purchase confirmations and security notices.
- To comply with the law and answer lawful requests.
We do not send marketing email.
4. Information stored on your devices
The Desk stores information in your browser’s local storage and IndexedDB: your device keys (which cannot be exported), your encrypted session, your settings and caches. These are strictly necessary for the Desk to work; we use no tracking or advertising cookies. The Connector stores its own data on your computer, including your Broker sessions, your encrypted Rithmic credentials and a log of its operations. Clearing the site’s data in your browser deletes what the Desk stored. Uninstalling the Connector keeps its data folder so that a reinstall can carry on; to delete what it stored, remove your logins in the Connector and then delete that folder.
5. Service providers we share information with
| Provider | What they do for us | Information involved |
|---|---|---|
| Our server provider, Los Angeles, United States | Runs our servers and database | The information in section 2 |
| Cloudflare | DNS, downloads of the Connector installer, storage of our encrypted backups | Network requests; backups, which are encrypted before they leave our servers |
| Tencent Cloud EdgeOne | Delivering static files such as the charting library | Network requests, including your IP address and browser details |
| Alibaba Cloud DirectMail | Sending verification and notification emails | Your email address and the content of the email |
| Whop | Processing payments | The payment details you give Whop, handled under Whop’s privacy policy; Whop shares the payment ID, plan, amount and checkout email with us |
| Discord | Our community, bot and direct messages | Your Discord user ID and the content of messages |
We may also disclose information when the law requires it, to protect the rights, property or safety of our users, the public or us, or as part of a merger, acquisition or sale of assets, in which case we will tell you.
Your Brokers (Tradovate, Rithmic and Prop Firms) process your trading data under their own privacy policies, which this policy does not cover.
6. International transfers
Our servers are in the United States, and our service providers may process information in other countries. If you use the Services from outside the United States, your information is transferred to and processed in the United States and those countries.
7. How long we keep information
- Your account, synced data and fills: until you delete your account.
- Account summaries: deleted 7 days after the last upload.
- Execution ownership records: deleted 30 days after the Connector last renewed them.
- Alerts: deleted after 30 days.
- Sign-ups whose email was never verified: deleted after 7 days.
- Sessions of a removed device: ended at once.
- Backups: kept for 7 days on our server and 30 days off-site.
- Purchase records: kept for accounting; after your account is deleted they are no longer linked to it.
- Security records: kept for security and abuse prevention.
8. Security
All traffic to our servers is encrypted with HTTPS. Sign-ins are bound to device keys that cannot be exported. Passwords are stored only as scrypt hashes; two-factor secrets and Activation Codes are stored encrypted. Backups are encrypted with a key kept offline, and our server logs do not record request contents, email addresses, codes or raw IP addresses. No system is perfectly secure; if you find a vulnerability, please tell us at service@traderxian.com.
9. Your rights and choices
- In the Desk you can view and export your fills, remove devices and unlink your Discord account.
- You can ask us to give you a copy of your information, correct it, delete it (including your fills), close your account, or stop or restrict some processing, by writing to service@traderxian.com. We answer within 30 days and may need to confirm your identity first.
- Depending on where you live, the law may give you further rights over your information; we will honour them.
- Where we rely on your consent, you can withdraw it at any time. Some information is necessary to provide the Services; without it we may not be able to provide them.
10. Children
The Services are for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this policy
If we update this policy, we will change the date at the top and, for a material change, tell you in the Desk or by email before it takes effect.
12. Contact
TraderXian. Email: service@traderxian.com.