Legal
Privacy Policy
Last updated October 3, 2026
This policy explains what Six Figure Trading ("we", "us") collects when you use Six Figure Trading OS, why, who we share it with, how long we keep it and the rights you have.
1. Data we collect
- Account details: full name, username, email address and password (stored only as a secure hash by our authentication provider; we never see it in plain text).
- Trading data you enter: journal entries and trades, screenshots, trading plans, setups, risk settings, funded account details, goals, reflections, resources and chart analyses.
- Analytics derived from your data: P&L, win rate, profit factor and other statistics calculated from your own entries.
- Network content: posts, comments, messages, friendships and community memberships.
- NEXUS AI: conversations, saved memories and voice audio you choose to send for transcription.
- Purchase records: email and membership status received from our checkout provider. We never receive your full card details.
- Consent records: when you accepted the Terms, confirmed you are 18+, and whether (and when) you opted into marketing emails.
- Technical data: basic request logs (IP address, browser type, timestamps) used for security and debugging.
2. Data received via Google sign-in
If you choose "Continue with Google", Google shares your name, email address, profile picture and a unique Google account ID with us. We use these only to create and sign in to your account. We do not receive your Google password, contacts, Gmail or Drive data.
3. How we use your data
- To provide the OS: storing, calculating and displaying your trading data.
- To power NEXUS responses using the context you allow it to read.
- To verify purchases and grant access.
- To secure the service, prevent abuse and respond to support requests.
- To send product updates and trading tips only if you opted in. You can opt out at any time in Settings.
We do not sell your personal data.
4. Cookies and tracking technologies
We use strictly necessary browser storage to keep you signed in and remember your theme and cookie choice. Analytics or marketing cookies are only used after you accept them in the cookie banner, and you can change your choice at any time in Settings. Details are in our Cookie Policy.
5. Sub-processors
We rely on these service providers, who process data only on our instructions:
- Hosting and database (Lovable Cloud, built on Supabase, with infrastructure on Cloudflare and AWS): stores all account, trading, network and NEXUS data, authentication records and uploaded files; serves the application.
- Google (OAuth sign-in): receives your sign-in request and returns your name, email, picture and Google ID to us. Only used if you choose Google sign-in.
- AI model providers via the Lovable AI Gateway: receive the NEXUS prompts and the context needed to answer them. Not used to train models.
- Whop (checkout): processes your payment and shares your email and purchase status with us.
- TradingView: the chart widget loads from TradingView and receives standard browser request data.
6. Data retention
- Account and trading data are kept while your account is active.
- When you delete your account in Settings, your personal and trading data is permanently deleted immediately. Residual copies in encrypted backups are overwritten within 30 days.
- Purchase records are kept with your identity removed (anonymized) for up to 7 years where required for tax and accounting.
- Contact form messages are kept for up to 24 months.
- Security logs are kept for up to 90 days.
7. Your rights
- Access and export: download your trades, journal and account information as CSV files from Settings → Export my data.
- Correction: edit your profile and entries at any time inside the app.
- Deletion: use Settings → Delete my account.
- Withdraw consent: turn off marketing emails or optional cookies in Settings.
- Depending on where you live (for example under GDPR or CCPA), you may also object to or restrict processing and complain to your local data protection authority.
8. Security
Data is encrypted in transit, access is restricted by row-level security so each user can only read their own records, and uploaded files are private.
9. Children
The service is only for people aged 18 or older. We do not knowingly collect data from minors.
10. Contact us about privacy
Email support@sixfiguretradingos.com or use the contact form. We respond within 30 days.