Legal

Privacy Policy

This pre-launch privacy policy describes the data practices implemented in the service today. It must be reviewed for the operator’s jurisdiction and updated before a public production launch.

What we collect

Account data: your email address, a password hash, or — if you use Google sign-in — the identifier Google returns for you. When the account is created we also record how it was made (email or Google) and where you first arrived from, on this website or in the terminal: the campaign tags in that link (such as utm_source=reddit) or the name of the referring site, never the full address of the page you came from. Until you create an account, those tags are kept only in your own browser, and this website hands them to the terminal when you open it. We also record the IP address the account was created from and the country our network provider, Cloudflare, derives from that address.
Sign-in history: each time you sign in or create an account, and each failed attempt, we record the time, the sign-in method, whether it succeeded, the IP address, the country derived from it and your browser’s user-agent string. When an attempt fails for an email address that has no account, the address that was typed is not stored.
Workspace data: the tabs, layouts, indicator settings, drawings, watchlists and preferences you save.
Session data: an opaque session token, so you stay signed in.
Guest data: if you use the terminal without an account, your workspace is kept in your own browser until you create one.
Operational data: service logs may record technical information needed to secure, operate and diagnose the service, such as request timing and errors.
Visitor statistics: on this website and in the terminal we count visits with Umami Cloud. For each page view it receives the page address, the referring page, campaign tags in the link, browser, operating system, device type, screen size and language, and it derives an approximate location (country, region, city) from your IP address without storing the address. It also counts clicks on the “Open the terminal” buttons and the creation of an account, with the sign-in method alone. In the terminal it counts one visit per page load and receives only the campaign tags of the address, not the instrument or any other setting. It sets no cookies and stores nothing on your device, it never receives your email or your account, and we see only totals, never a profile of a person.

AI assistant

The AI assistant is available only with an account. When you use it, in the chat or with the “Explain area” tool, we keep:

Conversations: what you type, the assistant’s answers, the chart facts those answers cite, and what is needed to continue the conversation later. Every finished “Explain area” answer is saved as a conversation in your chat list, so you can come back to it, even if you never open the chat.
“Explain area” requests: the request, the chart facts and the answer behind “Continue in chat”.
Ratings: the thumbs up or thumbs down under a finished answer, in the chat, in “Explain area” and under a breakdown. A thumbs up stores only the vote. A thumbs down also stores, so our team can review what went wrong, a copy of that answer, the question it answered, the chart facts it used and the reasons and comment you may add. The vote, the reasons, the kind of answer and the model are also kept as a statistic, with no text.
Usage records: for each request, its kind, the model that answered, its size in tokens, its cost, its time and whether it succeeded. They hold no message text.

To answer, the assistant reads market data, the chart details your browser sends (instrument, timeframe, indicators and drawings) and what you type. A third-party AI model provider processes this on our behalf. It never receives your email address, your IP address or any other account detail.

We keep conversations so you can return to them, and usage records to apply daily limits and for billing. A conversation is deleted one year after its last message, together with its facts and saved state. You can delete a conversation yourself at any time from the chat list. If an account reaches 10,000 conversations, the ones not updated for the longest time are deleted first. “Explain area” requests are deleted after 24 hours. When your account is deleted, your conversations and “Explain area” requests are deleted with it; usage records are kept as a billing record, no longer linked to you.

The copy of an answer you rated thumbs down and your comment are kept for up to one year, even if you delete the chat, and are deleted when your account is deleted. Pressing the thumbs down again deletes them at once. Our team reads comments; they are never sent to the AI model or shown to other users. The vote statistics are kept without text and, like usage records, are no longer linked to you once your account is deleted.

What we do not do

We do not sell personal data. We do not use account or workspace data to provide personalised investment advice. We do not use advertising trackers.

Why we process it

We process account, session and workspace data to provide the terminal and save your requested settings. As part of providing the account, we use your email address to send you service emails: password reset links, a link to confirm your email address, and security notices such as “your password was changed”. These emails are part of the service, not marketing. We process operational data to secure and maintain the service. Where applicable law requires a legal basis, these purposes may rely on performance of a service requested by you, consent, or legitimate interests in security and reliability, as applicable. We process visitor statistics and an account’s signup source on the basis of our legitimate interest in understanding, in aggregate, how the website and the terminal are found and used. We process the sign-in history, and the address and country an account was created from, on the basis of our legitimate interests in protecting accounts and the service against abuse and in investigating incidents; the country also tells us, in aggregate, where our users come from.

Third parties

Google is used as an optional identity provider when you choose Google sign-in. Umami Cloud (umami.is) processes the visitor statistics described above on our behalf. Amazon Web Services (Amazon SES, in the EU region in Ireland) delivers our service emails on our behalf: it receives the recipient’s email address and the content of those emails. A third-party AI model provider processes the AI assistant requests described above on our behalf. Market data comes from third-party exchanges. Hosting and infrastructure providers process data only as needed to operate the service. This page will be updated with the relevant providers and processing locations before production launch.

Retention

We retain account and saved workspace data while an account is active, subject to the limits and requirements of applicable law. Operational logs are retained only for as long as reasonably needed for security and service operations. The sign-in history and the address and country an account was created from are kept while the account exists and are deleted with it; records of failed attempts that belong to no account are kept without a fixed end date. AI assistant data is kept as described in the “AI assistant” section. Database backups, where kept, may hold deleted records for up to six months. A production retention schedule will be published before launch.

Your rights and requests

Depending on where you live, you may have rights to request access, correction, deletion, restriction or export of personal data. To make a request, contact us at support@orderflow.expert. We may need to verify your identity before acting on a request.

Contact

For privacy questions, contact support@orderflow.expert.

Last reviewed: October 12, 2026