Privacy Policy

We collect the following categories of information:

• Account information: your email address, first name, and user role. Required to create and manage your PullTab Trading account.
• Trading data: trade records (instrument, entry/ exit price, timing, outcome) that you or your connected broker share with the Service. Used to populate the Pull Tabs and analytics screens.
• Broker credentials: if you connect a trading account, we store your broker API credentials encrypted at rest. We never store raw passwords to trading accounts.
• Device & usage data: device type, operating system, app version, push-notification tokens, and in-app activity. Used to improve the Service.
• Support correspondence: emails you send to our support address.

• Provide, operate, and improve the Service.
• Authenticate you and keep your session secure.
• Display your trades, metrics, and account data in the app.
• Send push notifications you have opted into (e.g. trade closed).
• Send transactional emails (welcome, password reset, magic login links).
• Respond to your support requests.
• Detect and prevent abuse, fraud, or policy violations.

We do not sell your personal information. We share it only with:

• Service providers that run our infrastructure (Supabase for database and auth, Resend for email delivery, Apple and Google for push notification relay, Cloudflare for hosting).
• Your connected broker — only to the extent required to fetch your trades.
• Legal authorities when required by law, subpoena, or to protect our rights.

We use industry-standard security practices including TLS in transit, encryption at rest for sensitive fields (including broker credentials), row-level security policies at the database layer, and least-privilege access for our team.

We retain your account and trading data as long as your account is active. If you delete your account, we delete your personal information within 30 days, except where we are required to retain it for legal, accounting, or fraud-prevention purposes.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data.
• Export your data in a portable format.
• Withdraw consent for push notifications or optional processing.

To exercise any of these rights, email [email protected].

PullTab Trading is not directed to children under 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. Material changes will be communicated via the app or email.