What we can see, and what we deliberately cannot

Broker connections

• You authorise TradeCraft through your broker's own login screen. We never ask for your broker password.
• Access is used to read your executions for journalling. TradeCraft does not place, modify or cancel orders.
• When a broker session expires, syncing simply stops until you re-authorise — nothing is retried silently.

Your data

• Every record is scoped to your account, enforced at the database level rather than only in the app.
• Trading profiles isolate separate accounts so their trades and P&L never mix.
• Traffic to and from the app runs over HTTPS.

AI features

• Chart screenshots sent to AI Lens are analysed in memory and are not stored afterwards.
• News enrichment happens once per headline on the server and is shared by all readers — it is not generated from your personal trades.
• Agents and the mindset score read only the trades already in your own journal.

Reporting a problem

If you believe you have found a security issue, please report it through the in-app support widget with enough detail to reproduce it, and give us a chance to fix it before disclosing it publicly.

What this page is not

This is a plain description of how the product works today. It is not a certification, audit report or compliance attestation, and it should not be read as one.