Privacy Policy
Effective September 24, 2026
Run is a trading journal. To work, it has to hold a copy of your trading record. This page says exactly what we collect, why, who else touches it, and how to take it back.
This policy is part of our Terms of Service.
Summary
We hold a copy of your trading record so we can show it back to you. We do not sell it, show you ads, or connect to your broker. A few providers run the service for us, and every one is listed below. You can download or delete everything from Settings at any time.
What this policy covers
This policy covers the personal data we handle when you visit this website, request access, or use the service. It does not cover your broker, your prop firm, Tradovate, or any other service you reach from ours; each has its own policy.
What we collect, and why
| What we collect | Why | Who else receives it |
|---|---|---|
| Your sign-in: your email address, your name and profile image if you sign in with Google, and your time zone | To sign you in, email your sign-in codes, and show times in your zone | Google, only if you sign in with it; Gmail, which sends the codes |
| Your broker exports: fills, position history, cash history, orders and account balance history. We keep the rows we read from them, and a compressed copy of each file you upload | To build your record, and to read a file again if we ever find we misread it, without asking you to upload it twice | Neon, which stores the rows; Cloudflare, which stores the files; Vercel, in transit |
| Your record: trades, sessions, accounts, and the labels you give them | To show your record back to you, and to write your daily read | Neon; Anthropic, for the figures behind the daily read |
| How you use this website and the service: the pages you open and events such as signing in, uploading a file, or a page failing to load, with a random visitor id and the page path. On the first page of a visit, the site that linked you here and any campaign tag in the link. Your country, as our host reports it; never your IP address | To see where the product fails or confuses people, and how people find it | Neon; Vercel Analytics and Speed Insights count page views and page speed without cookies |
| If you request access: the email address you enter on our home page | To invite you, and to limit requests to one a day per address | Gmail, which emails it to us; only its domain goes into usage events |
| Cookies: a session cookie, a visitor id, and your appearance preference | To keep you signed in, tell one visit from another, and remember light or dark | Nobody |
The daily read. Once a day after the close, we send the figures behind the read to Anthropic, whose Claude model writes the sentence around them: your trades and orders (times, contracts, sizes, prices and results) and your account names and types. Never your email, your name, or anything you typed. Anthropic does not train its models on data sent through its API.
We use your email to tell you about material changes to the service or to these terms, and usage events only in aggregate.
Who else receives it
The service runs on infrastructure we rent, and your data passes through or rests on it:
- Vercel hosts the application and serves every page. Your data passes through their servers in transit.
- Neon hosts the database in the United States. Your record rests there, encrypted at rest.
- Cloudflare stores a compressed copy of each file you upload, encrypted at rest, where only the service can reach it.
- Anthropic writes the daily read from the figures described above.
- Google, only if you choose to sign in with Google: they tell us your email, name, and profile image.
- Google Workspace (Gmail) sends the sign-in codes and any email we send you.
- Vercel Analytics counts page views, and Vercel Speed Insights measures how fast pages load, both without cookies or personal identifiers.
Each is bound by its own terms and privacy policy, and each is limited to what running the service requires. We do not sell your data, and we share your record with nobody else.
What we never do
We never connect to your brokerage account, and we cannot: you upload files, we do not pull them. We never place trades, move money, or hold funds. We never share your trading record with other users.
Security
All traffic is encrypted in transit. Sign-in codes are stored hashed and expire quickly. Your data is stored encrypted at rest by our database and file storage providers. Access to production systems is limited to the people who run the service. No system is perfectly secure, and if we learn of a breach affecting your data we will tell you.
How long we keep it
For as long as you have an account. Your record is never expired or trimmed by us; it stays until you delete it. Sign-in codes expire within minutes and are deleted. Usage events are kept in aggregate.
Children
The service is for adults. We do not knowingly collect data from anyone under 18, and if we learn we have, we delete it.
Downloading and deleting your data
In Settings › Data you can download your complete record as a CSV at any time, and you can delete your account.
Deleting your account removes every import and every file you uploaded, every trade, every account, your labels, your usage events, and your sign-in, immediately and irreversibly. Nothing is retained in the live database or in file storage. Automated database backups held by our provider may contain your data for a short period after deletion and expire on their own schedule; they are never restored to bring a deleted account back.
If you cannot sign in to do this yourself, email us from the address on the account and we will do it for you.
Your rights, including U.S. state privacy rights
Wherever you live, you can see your data, take a copy of it, correct your labels, and delete all of it, from within the service.
Depending on your state (California, Colorado, Virginia and others), you may also have the right to know what personal data we hold, to correct or delete it, and to opt out of its sale or its use for targeted advertising. We do not sell personal data or use it for targeted advertising. To exercise any right, email us from the address on your account, or have an authorised agent do so; we will answer within 45 days, and asking will never change how we treat you.
Changes to this policy
If we change this policy in a way that matters, we will tell you by email or in the service before the change takes effect, and we will update the date at the top.
Contact
Modryn Studio LLC, support@run.trading.