This Privacy Policy explains how Ironmark, operated by Calypso LLC (“we,” “us”), collects, uses, and shares information when you use the Service at app.ironmarktrading.com, the Ironmark desktop application, and this website.
Information we collect
- Account info: name, email, username, and avatar, provided via our authentication provider when you sign up or sign in (including via Google, Discord, or X if you choose).
- Trading data you provide: the trades, accounts, strategies, notes, and related records you import or enter.
- Broker connection data (optional, read-only): if you connect a brokerage or trading platform (such as Tradovate) for journaling or verification, we import—on a strictly read-only basis—your executions, orders, and account identifiers. Authorization happens through the broker’s own sign-in flow.
- Copy / execution data (optional): if you enable automated copying, we process the account activity, Leader signals, and per-account execution results needed to place and reconcile orders, and your agent may report positions, P&L, and non-sensitive device/behavior preferences to power remote control and cross-device sync.
- Discord (optional): if you link Discord, we store your Discord id/handle to grant access to Discord-gated strategies. We do not store your Discord password or OAuth tokens.
- Billing: handled by our payment processor (Stripe); we do not store full card numbers.
- Usage & analytics data: basic technical and usage information (e.g., pages viewed, device/browser, referrer) and error/diagnostic reports needed to operate, secure, and improve the Service — including via analytics such as Google Analytics.
- Support: messages you send us (e.g., via Discord or email) and diagnostics you choose to share.
Your broker credentials for execution stay on your device
The two connection modes handle credentials differently, and both keep your broker password out of our hands:
- Read-only sync uses the broker’s own sign-in flow; we never receive or store your broker password, access tokens are stored encrypted at rest, and you can disconnect at any time to revoke access going forward.
- Copy / execution runs through the Ironmark desktop application. Credentials and API secrets you enter there are encrypted at rest on your own machine (operating-system secure storage) and used only to connect to your own accounts — they are not transmitted to us.
How we use information
- To provide the Service — store your journal, compute analytics, render the profiles and share cards you choose to make public, and (where you enable it) place and reconcile the orders you or a Leader direct.
- To authenticate you and secure your account.
- To process payments and communicate about the Service and respond to support requests.
- To improve and maintain the Service, and to comply with law.
We do not sell your personal information.
Broker connections
Connecting a broker is optional. In read-only mode we use the access you authorize solely to import your trade and account data for journaling, analytics, and—where you opt in—verified track records, and we never place, modify, or cancel orders or move funds. If you separately enable copy / automated execution, orders are placed on your accounts only per your settings and at your direction, and you can disable it at any time. We do not sell broker-sourced data.
Public content
Public profiles and share cards are opt-in. Information you choose to make public (e.g., a username, bio, avatar, and the performance data you elect to share) is, by design, visible to anyone with the link. You control what is public and can change or revoke it.
Service providers
We use third parties to operate the Service, such as authentication, database and application hosting, analytics (e.g., Google Analytics), Discord, transactional email, managed-server (VPS) infrastructure, and—where you opt in—broker connections and payment processing (Stripe). We may disclose information if required by law.
Cookies & analytics
We use cookies strictly necessary for authentication and session management. We also use analytics (such as Google Analytics) to understand aggregate usage and improve the Service; these may set cookies or similar identifiers. We do not use them to sell your personal information, and where required we honor applicable consent and opt-out signals.
Your choices
- Access & export: you can export your journal data.
- Deletion: you can request deletion of your account and data.
- Disconnect: you can disconnect linked accounts, disable copying, and revoke access at any time.
- Public sharing: you can make content private or revoke share links at any time.
Data retention & security
We retain your data for as long as your account is active or as needed to provide the Service, and apply reasonable measures to protect it. No method of transmission or storage is 100% secure.
Children
The Service is not directed to anyone under 18, and we do not knowingly collect information from children.
Changes
We may update this Policy; we will update the date above and, where appropriate, provide notice.
Contact
Privacy questions: support@ironmarktrading.com.
