Privacy Policy

This Privacy Policy explains how UNFLD ("UNFLD", "we", "us" or "our") collects, uses, stores and protects personal information when you use unfldtrading.com and our services.

Questions about privacy can be sent to support@unfldtrading.com.

1. Who We Are

UNFLD operates a trading journal, analytics and account-monitoring service.

For the personal information described in this Privacy Policy, UNFLD is the data controller responsible for deciding how and why the information is processed. You can contact the data controller at support@unfldtrading.com.

2. Information We Collect

Depending on how you use UNFLD, we may collect the following information.

Account information

When you create an account, we may collect:

• email address;
• display name;
• password information;
• account preferences; and
• information required to authenticate and secure your account.

Passwords are stored using one-way cryptographic hashing. We do not store passwords in readable form.

If you sign up or sign in with Whop, Whop confirms who you are and shares your Whop user ID, email address, whether Whop has verified that email, and your name or username with us. We do not receive or store your Whop password. When you create an account this way, you also become a member of UNFLD's free plan on Whop, and Whop keeps a record of that membership under its own privacy policy.

Waitlist information

If you join our waitlist, we collect:

• email address; and
• the date you joined.

Trading and account information

If you use UNFLD's trading features, we may process:

• connected trading-account identifiers;
• account balances;
• equity;
• positions;
• orders;
• trade history;
• profit and loss;
• deposits and withdrawals;
• payouts;
• performance statistics;
• journal entries;
• notes;
• tags;
• screenshots;
• backtesting sessions; and
• other information you choose to enter or import.

This information may contain financial or trading-related information, although UNFLD is not a bank, broker or investment service.

Broker and platform connection information

Where you connect a supported broker or trading platform, we may process credentials, API keys, access tokens or other authentication information necessary to retrieve your account information.

The exact information depends on the provider.

For example:

• MT4/MT5 connections may use a read-only investor password;
• other providers may use an access token;
• Tradovate may require credentials that permit account access because of the authentication options provided by Tradovate; and
• Rithmic connections use your Rithmic username and password, because Rithmic does not offer a read-only login. They are stored encrypted.

We use connected credentials only for the functionality you request and do not use them to place, modify or close trades.

Security information

We may collect technical information such as:

• IP address;
• sign-in attempts;
• registration attempts;
• password-reset attempts;
• timestamps;
• device or browser information; and
• other information reasonably necessary to protect UNFLD against fraud, abuse or unauthorised access.

Technical and usage information

We may collect limited technical information required to operate and improve UNFLD, including information about browser requests, errors, service usage and performance.

Where we use analytics, we aim to use privacy-conscious analytics that do not unnecessarily identify individual users.

3. How We Use Information

We use personal information to:

• create and manage your account;
• provide the UNFLD service;
• display your trading information and analytics;
• retrieve information from connected trading accounts;
• process imported trading information;
• provide backtesting and journaling functionality;
• send account-related emails;
• send password-reset and security messages;
• respond to support requests;
• prevent fraud, abuse and unauthorised access;
• maintain and secure our systems;
• diagnose technical problems;
• improve the service;
• comply with legal obligations;
• send UNFLD product updates and news if you chose to receive them when you signed up (every one has an unsubscribe link, and you can turn them off in Settings); and
• communicate with waitlist users where they have requested or consented to such communications.

We do not sell your personal information.

We do not use your private trading data to sell advertising to third parties.

4. Legal Bases for Processing

Depending on the circumstances, we rely on one or more of the following legal bases under applicable data-protection law:

Contract

We process information where necessary to provide the service you requested under our agreement with you.

For example, this includes operating your account and displaying your trading information.

Legitimate interests

We may process information where necessary for our legitimate interests, provided those interests are not overridden by your rights.

Examples include:

• protecting UNFLD against fraud and abuse;
• maintaining service security;
• troubleshooting and improving the service;
• maintaining technical infrastructure; and
• protecting our legal rights.

Consent

Where consent is required, we will ask for it.

For example, we may rely on consent for certain waitlist or marketing communications.

You can withdraw consent at any time where processing is based on consent.

Legal obligation

We may process or retain information where necessary to comply with a legal obligation.

5. Connected Trading Accounts

When you connect a broker or trading platform, UNFLD may receive trading information directly from that provider or through a connectivity provider.

We process this information solely to provide the functionality you request, unless another lawful purpose is explained to you.

UNFLD does not use connected credentials to execute trades.

You remain responsible for reviewing the permissions granted to any connected broker, platform or third-party account provider.

You should also review the relevant provider's privacy policy and terms.

6. Who We Share Information With

We may use carefully selected service providers to operate UNFLD.

Depending on the features you use, these may include:

• Vercel — hosting and website infrastructure;
• Neon — database infrastructure;
• Resend — transactional email;
• Zoho — customer-support email;
• Upstash — background scheduling/infrastructure;
• Whop — payments for paid plans, signing up and in with Whop, and membership of UNFLD's plans on Whop;
• MetaApi — trading-account connectivity where applicable;
• Spotware/cTrader — trading-account connectivity where applicable;
• Tradovate — trading-account connectivity where applicable;
• Rithmic — trading-account connectivity where applicable; and
• other service providers reasonably required to operate the service.

These providers process information on our behalf or as otherwise described in their own privacy documentation.

We do not sell your personal information to these providers.

We may also disclose information where reasonably necessary to:

• comply with a legal obligation;
• respond to lawful requests from authorities;
• protect the rights, safety or property of UNFLD or others;
• investigate fraud, abuse or security incidents; or
• enforce our Terms of Service.

7. International Transfers

Some service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will use an appropriate lawful transfer mechanism and appropriate safeguards where required by applicable data-protection law.

This may include adequacy regulations or approved contractual safeguards.

8. How Long We Keep Information

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Generally:

• Waitlist information is retained until you unsubscribe, the relevant waitlist purpose ends, or you ask us to delete it, subject to legal requirements.
• Account and trading information is retained while your account remains active and for a reasonable period afterwards where necessary for legitimate business, security or legal purposes.
• Security records are retained for a limited period appropriate to the security purpose.
• Backups may retain deleted information for a limited period until the relevant backup is overwritten.

Retention periods may vary depending on the nature of the information and our legal obligations.

9. Data Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Depending on the information and service involved, measures may include:

• encryption in transit;
• encryption or protected storage of sensitive credentials;
• access controls;
• authentication controls;
• logging and monitoring;
• restricted internal access; and
• secure hosting infrastructure.

However, no online service can guarantee absolute security.

If we become aware of a personal-data breach that requires notification under applicable law, we will take the steps required by law.

10. Your Data-Protection Rights

Depending on the circumstances and applicable law, you may have rights to:

• access your personal information;
• correct inaccurate information;
• request deletion;
• restrict processing;
• object to certain processing;
• request data portability;
• withdraw consent where processing is based on consent; and
• complain to a data-protection authority.

You can exercise applicable rights by contacting:

support@unfldtrading.com

We may need to verify your identity before completing certain requests.

Some rights are subject to legal exceptions.

11. Account Deletion

You may request deletion of your UNFLD account and associated personal information by contacting us.

Some information may need to be retained where required by law, necessary to establish or defend legal claims, necessary for security purposes, or otherwise permitted by applicable law.

Deletion from active systems may not immediately remove information from backups, which may be retained temporarily until routinely overwritten.

12. Cookies

UNFLD uses cookies and similar technologies where necessary to operate the service.

For example, we use a session cookie to keep you signed in. Every cookie we use, what it is for and how long it lasts is listed in our Cookie Policy.

Where we use non-essential cookies or similar technologies that require consent under applicable law, we will request that consent before using them.

We do not use advertising cookies to sell or target advertising based on your UNFLD activity.

13. Analytics

We may use privacy-conscious analytics to understand aggregate usage and improve UNFLD.

Where analytics are configured to be anonymous or non-identifying, they are used to understand general service usage rather than identify individual users.

If our analytics providers or methods change materially, this Privacy Policy may be updated accordingly.

14. Children's Data

UNFLD is intended for users aged 18 and over.

We do not knowingly provide the service to children under 18.

If you believe a person under 18 has provided personal information to UNFLD, contact us at support@unfldtrading.com.

15. Third-Party Websites and Services

UNFLD may contain links to or integrations with third-party websites and services.

We are not responsible for the privacy practices, security or content of third parties.

You should review their privacy policies before providing information to them.

16. Changes to This Privacy Policy

We may update this Privacy Policy when our services, data processing activities or legal requirements change.

We will update the "Last updated" date when changes are made.

Where a change materially affects how we use your personal information, we will provide additional notice where required by law.

17. Contact Us

For privacy questions, data requests or concerns, contact:

support@unfldtrading.com

18. Complaints

If you are unhappy with how we handle your personal information, please contact us first so we have an opportunity to address your concern.

You also have the right to complain to the Information Commissioner's Office (ICO) or another applicable data-protection authority.

ICO website: ico.org.uk