Privacy Policy
Last updated: October 13, 2026
This policy explains what GreeksLedger collects, why, who we share it with, and the choices you have. It applies to the marketing site at https://www.greeksledger.com and the application at https://app.greeksledger.com.
1. What we collect
- Account data. When you sign in through Google Firebase Authentication we receive your email address, display name, profile photo URL and a user identifier. We store these with your role, data tier and access status.
- Journal data. Everything you enter: portfolios, positions, legs, fills, adjustments, drafts, notes, tags, alerts, and the market snapshots (spot, chain, rates) frozen when you open or adjust a position.
- AI provider keys. If you add a Claude or OpenAI key, we store it encrypted at rest (AES-GCM) together with the last four characters for display and your chosen model. We never log the full key.
- Market-data credentials. If you connect a broker or data provider, we store that token the same way as AI keys and use it only to fetch data for you.
- Waitlist and contact forms. Name, email, your message or note, and the IP address and browser user-agent of the submission, used for spam control, to reply, and to send you a seat when one opens.
- Technical data. Standard server logs (IP address, request path, timing, errors) kept by our hosting provider for security and debugging.
We do not use advertising trackers or third-party analytics cookies. The only cookies or local storage we use keep you signed in and remember preferences such as theme.
2. How we use it
- to provide the Service: authenticate you, store and display your journal, price positions;
- to fetch quotes, chains and calendars for the tickers you look at;
- to run AI features you trigger, with the key you supplied;
- to reply to messages you send us and to manage the waitlist;
- to keep the Service secure, debug problems and prevent abuse;
- to tell you about material changes to the Service or these policies.
We do not sell your data and we do not use your journal to train models.
3. Who we share it with
We use these processors to run the Service. Each receives only what its role requires.
- Google Firebase — authentication.
- Neon — managed Postgres hosting for your account and journal data.
- Cloudflare — hosting, networking, email delivery for the contact form.
- Market-data providers (for example Tradier, Yahoo Finance, or a provider you connect) — receive the ticker symbols you look up, never your account identity.
- AI providers (Anthropic, OpenAI) — only when you use an AI feature, and only the position details needed for that request, sent with your own key under your agreement with that provider.
- GrowthBook — feature flags; receives a hashed user identifier and tier.
We may also disclose data when the law requires it, to protect our rights or users, or as part of a merger or acquisition, in which case this policy continues to apply.
4. Retention and deletion
We keep your account and journal data while your account is active. You can delete individual positions, drafts and keys in the app at any time. To delete your account and all associated data, email hello@greeksledger.com from the address on the account; we complete deletion within 30 days, except for backups that expire on their own schedule and records we must keep by law. Contact-form messages are kept for up to 24 months.
5. Your rights
Depending on where you live you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. Email us and we will respond within 30 days. If you are in the EEA or UK you also have the right to complain to your supervisory authority.
6. Security
Data is encrypted in transit (TLS) and at rest by our hosting providers; secrets you give us are additionally encrypted by the application before storage. Access to production systems is limited to the people who operate the Service. No system is perfectly secure; if we learn of a breach affecting you we will notify you as the law requires.
7. International transfers
Our providers operate in the United States and other countries. Where required we rely on standard contractual clauses or equivalent safeguards for transfers out of the EEA/UK.
8. Children
The Service is not directed to anyone under 18 and we do not knowingly collect their data.
9. Changes
We will post any changes here and update the date above. For material changes we will notify you in the app or by email.
10. Contact
Privacy questions: hello@greeksledger.com or the contact form. See also our Terms of Service.