Privacy Policy

Last updated: March 6, 2026

This Privacy Policy describes how Chris Kohl ("we," "us," or "our"), operating TradeReign at trade-reign.com, collects, uses, and protects your personal information when you use our trading discipline enforcement application.

By using TradeReign, you agree to the collection and use of information in accordance with this policy.

Additional risk, platform, and marketing disclosures are available at /disclosures.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and a hashed password. If you sign in via Google OAuth, we receive your name, email address, and profile image from Google.

Tradovate Credentials

To connect your Tradovate account, we collect your Tradovate username, password, Client ID (CID), and Secret. These credentials are encrypted using AES-256-CBC encryption before being stored in our database. We do not store them in plain text at any time.

Rule Settings

We store your configured trading rules and preferences so they persist across sessions. This includes rule thresholds, enabled/disabled states, and UI preferences such as your selected theme.

Violation Logs

When a trading rule is triggered, we log the violation including the rule name, a description of what occurred, the action taken, and a timestamp. This data is used to display your violation history within the app.

Usage Data

We do not currently use any analytics services. We do not track page views, session duration, or behavioral data.

2. How We Use Your Information

We use the information we collect to:

• Authenticate you and maintain your account
• Connect to your Tradovate account via their API to monitor and enforce your trading rules in real time
• Persist your rule settings and preferences across sessions
• Display your violation history within the dashboard
• Process payments through Stripe when billing is active
• Communicate with you about your account or service updates

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Railway. Tradovate credentials are encrypted at rest using AES-256-CBC encryption with a server-side encryption key. Passwords are hashed using bcrypt and are never stored in plain text.

All data transmission between your browser and our servers uses HTTPS/TLS encryption. We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

4. Third-Party Services

TradeReign integrates with the following third-party services:

• Tradovate — Your trading account credentials are used solely to connect to Tradovate's API on your behalf to monitor positions and enforce your rules.
• Google OAuth — If you choose to sign in with Google, your authentication is handled by Google. We receive only your name, email, and profile image.
• Stripe — Payment processing is handled by Stripe. We do not store your payment card information. Stripe's privacy policy applies to payment data.
• Investing.com — Economic calendar data for the News Blackout rule is fetched from Investing.com once daily. No personal data is shared with Investing.com.
• Railway — Our application and database are hosted on Railway's infrastructure.

5. Cookies

TradeReign uses session cookies to maintain your authenticated login state. These are necessary for the application to function and cannot be disabled while using the service. We do not use advertising or tracking cookies.

6. Data Retention

We retain your account data for as long as your account is active. Violation logs are retained indefinitely to provide you with your trading history. If you delete your account, all associated data including credentials, rule settings, and violation logs will be permanently deleted from our database.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Export your data in a portable format

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

TradeReign is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated date. Your continued use of TradeReign after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: