Privacy policy

reps is an independently operated trading journal. For any privacy question, contact contact@reps.trading.

• Account: your email and authentication details (or your Google account if you sign in with Google).
• Profile: what you choose to set, such as a nickname and the market and experience you picked at onboarding.
• Your content: the trades, notes, journal entries, strategies and screenshots you create. This is yours; we process it to run the app.
• Connected platforms: if you connect a broker or exchange, the read-only API key you provide (stored encrypted) and the trade history we import for you. Read-only means we can view your trades but cannot place orders or move funds.
• Usage & diagnostics: basic product analytics and error logs so we can fix bugs and improve the app.
• Payments: if you buy a paid plan, our payment providers (lava.top for card payments, NOWPayments for crypto, Telegram for Stars) collect the billing details and payment information you enter at checkout. We receive only limited data such as your plan, billing country and payment status. We never see or store your full card number.

We rely on a small set of trusted providers to run reps:

• Supabase: database, authentication and file storage (your account and content live here).
• Vercel: application hosting.
• Google: optional sign-in with Google.
• PostHog: product analytics.
• Sentry: error monitoring.
• Resend: sending account emails (such as sign-in and verification codes).
• lava.top, NOWPayments and Telegram: our payment providers, which handle checkout and billing when you buy a paid plan (card, cryptocurrency and Telegram Stars respectively).
• Brokers & exchanges you connect: when you link an account (for example Bybit, MetaTrader or cTrader), we send signed read-only requests to that platform to fetch your trades.

To provide and secure the service, remember your settings, show your stats, send essential account emails, prevent abuse, and improve the product. We do not sell your data or use it for third-party advertising.

If you connect a broker or exchange to import trades, you provide a read-only API key. We use it only to fetch your own trade history.

• Read-only. We can view your trades, positions and balances, but we cannot place trades, transfer, or withdraw funds.
• Encrypted at rest. Your API credentials are stored encrypted, with the encryption key kept outside the database, and are never exposed to your browser.
• You stay in control. Disconnect a platform at any time and we delete our copy of the key. We recommend you also revoke the key in your exchange or broker.
• Third parties. The exchange or broker you connect is a separate company; how it handles your data is governed by its own terms and privacy policy.

We use cookies that are necessary to keep you signed in, and privacy-conscious product analytics (PostHog) to understand how features are used. We don't run advertising trackers.

We keep your data while your account is active. You can delete your account at any time in Settings inside the app, which removes your profile and content. Backups and provider logs may persist for a short period before they expire.

You can access and correct your information in the app, and delete your account to erase your data. For any other request, email contact@reps.trading.

Access to your data is enforced at the database level (row-level security) and encrypted in transit. Connected-platform API keys are additionally encrypted at rest. Our database and application run in the EU (Ireland); because some providers operate globally, your data may also be processed in other countries.

reps is for adults. You must be 18 or older to use it, and we don't knowingly collect data from anyone under 18.

If this policy changes, we'll update the date at the top and, for significant changes, surface a notice in the app.