Privacy Policy

1. Who we are

SSB Ventures LLC (“The Trader’s Tower,” “we,” “us”) operates The Trader’s Tower web application at www.traderstower.com — a journaling and performance-analytics tool for futures traders. This Privacy Policy explains what we collect, how we use it, and the choices you have. Questions: [email protected].

2. Information we collect

We collect only what we need to provide the service to you:

• Account information — your name, email address, and password (stored only as a secure hash), or your Google account identifier if you sign in with Google.
• Trade and journal data you enter — the trades, notes, setups, screenshots, and journal entries you create.
• Brokerage data you import or connect — when you upload a broker CSV or authorize a brokerage connection, we receive your executed orders, fills, and positions in order to build your journal. See “Brokerage connections” below.
• Billing information — if you subscribe to a paid plan, payment details are collected and processed by Stripe. We do not store your full card number.
• Usage and technical data — basic logs (e.g. IP address, browser type, timestamps) and authentication cookies needed to keep you signed in and to operate and secure the service.

3. How we use your information

• To provide, maintain, and improve The Trader’s Tower service for you.
• To compute your statistics, analytics, calendar, and (if you use it) AI-generated trade reviews.
• To authenticate you, secure your account, and prevent abuse.
• To process subscriptions and send transactional email (verification, password reset, account notices).
• To respond to your support requests.

We do not sell your personal information or your trading data, and we do not use your trading data to place trades or for any purpose other than providing the service to you.

4. Brokerage connections

The Trader’s Tower lets you import your trade history by uploading a broker export (CSV) or, where available, by authorizing a direct brokerage connection. When you authorize a connection:

• Access is read-only and limited to the data needed to reconstruct your trades (orders, fills, positions).
• We never receive or store your brokerage login password. Where a connection uses access tokens, those tokens are encrypted at rest.
• Your brokerage data is used solely to build and display your own journal and analytics, and is never sold or shared for marketing.
• You can disconnect a brokerage at any time, and you can request deletion of imported data (see “Your choices”).

Your use of any connected brokerage remains subject to that brokerage’s own terms and privacy policy. We are not responsible for the brokerage’s practices.

5. How we share information

We share information only with service providers (“sub-processors”) that help us run The Trader’s Tower, each limited to its stated purpose:

• Railway — Application hosting and database infrastructure.
• Stripe — Subscription billing and payment processing.
• Resend — Transactional email (verification, password reset).
• Anthropic — AI-generated trade reviews (only when you use the AI debrief feature).
• Cloudflare — DNS, domain routing, and contact email.
• Connected brokerages — Importing your executed trades when you authorize a connection.

We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a merger or sale of the business (in which case we will notify you). We do not sell your data.

6. Cookies

We use first-party cookies that are strictly necessary to sign you in and keep your session secure. We do not use third-party advertising cookies. You can clear cookies in your browser, but doing so will sign you out.

7. Data security

We protect your data with encryption in transit (HTTPS/TLS), encryption at rest for sensitive tokens, per-account data isolation (every record is scoped to its owner), and access controls. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place. See our Security & data page for details.

8. Data retention and deletion

We keep your account and journal data for as long as your account is active. You may request export or deletion of your data, or deletion of your account, by emailing [email protected]. We will delete your data within a reasonable period after a verified request, except where we are required to retain certain records (e.g. for tax or legal purposes).

9. Your choices and rights

Depending on where you live (for example, under the California CPRA or the EU/UK GDPR), you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. To exercise any of these rights, contact us at [email protected]. We will not discriminate against you for exercising these rights.

10. Children

The Trader’s Tower is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. International users

The Trader’s Tower is operated from the United States. If you access it from elsewhere, you understand your information will be processed in the United States, which may have different data-protection laws than your country.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, for material changes, provide additional notice. Your continued use of The Trader’s Tower after an update means you accept the revised policy.

13. Contact

Questions about this policy or your data? Email [email protected].