Privacy policy

Information we collect

Information you give us directly

• Email address — when you join the waitlist or, in the future, create a TickProof account. Waitlist emails are held in Beehiiv, our email provider, together with whether and when you agreed to marketing email.
• Profile information — when accounts go live, this may include your name, display name, time zone, and password (we never see the password in plain text; it is stored as a salted hash).
• Payments — if you take a paid plan, payment information is handled by our payment processor, Stripe. We do not store full card numbers on our servers.
• Support correspondence — anything you send us by email or other support channels.

Information from your connected trading accounts

When you connect a broker or prop firm account to TickProof (initially Tradovate, NinjaTrader® and others later), we access trade and account data via OAuth or equivalent authorisation. This may include:

• Account identifiers, account type (live, evaluation, paper), and broker
• Executed trades (instrument, entry/exit prices, timestamps, contract size, direction, commission, P&L)
• Account balances and equity changes
• Position and order information

We only access data you authorise us to access. You can disconnect your accounts at any time from your TickProof account settings — when you disconnect, we stop pulling new data immediately.

Information collected automatically

When you visit our website or use the Service we may automatically collect:

• IP address and approximate geographic location
• Device and browser information (user agent, operating system, screen size)
• Pages visited, links clicked, time spent on the site
• How you interact with a page, such as clicks, scrolling and mouse movement, which Microsoft Clarity records as session replays if analytics cookies are on (see Cookies below)
• Referring website
• Cookie identifiers (see Cookies below)

We use this information to operate, secure, and improve the Service. We do not use it to build advertising profiles. If advertising cookies are on, X receives limited information so we can measure our ads on X (see Cookies below).

Information from third parties

If you sign up for a connected service through a TickProof referral link (for example, a prop firm affiliate link), the third-party service may share confirmation that you signed up so we can be credited for the referral. This is typically limited to a referral ID — not your account details or trading activity at the third party.

How we use your information

We use the information we collect to:

• Provide and operate the Service, including syncing your trade data, calculating analytics, and rendering verified shares
• Send you the emails you have asked for (waitlist updates, product notifications, account notifications)
• Send marketing email (news of TickProof features and updates, and offers, including offers from prop firms) only if you agreed to it: by ticking the box when you joined the waitlist or created your account, or later in your account settings. If you have not agreed, you only get emails about the waitlist and your account. Some account emails, such as the weekly recap, may include a short link to prop firm offers. You can unsubscribe from marketing email at any time from the link in every marketing email or in your account settings.
• Respond to support requests and communicate with you about your account
• Maintain the security of the Service and detect abuse, fraud, or unauthorised access
• Improve and develop the Service — including understanding how features are used in aggregate
• Comply with legal obligations and enforce our Terms and Conditions
• Operate referral and affiliate relationships in a transparent and accurate way
• Measure how well our adverts on X work, if advertising cookies are on

We do not sell your personal information for money. We do not share your trade data with third-party advertisers or marketers. If advertising cookies are on, the X pixel shares limited information about your visit with X, which some US state laws may treat as “selling” or “sharing” personal information for advertising. You can opt out at any time (see Cookies below).

Legal basis for processing (EU/UK users)

Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies, we rely on the following legal bases:

• Performance of a contract — to provide the Service you have signed up for (account creation, trade syncing, analytics, verified shares)
• Consent — for the waitlist email signup, optional marketing communications, and non-essential cookies. You can withdraw consent at any time.
• Legitimate interests — for security, fraud prevention, product analytics in aggregate form, and operating the affiliate referral relationships. We weigh these interests against your rights and freedoms; you can object to processing on this basis (see Your rights below).
• Legal obligation — where we need to process information to comply with applicable law.

Who we share your information with

We share personal information only with the following categories of recipient:

Service providers (data processors)

We use third parties to operate the Service. They process personal data on our behalf under written data-processing agreements, and only as instructed by us. Current providers include:

This list may change as we add or replace providers. We will update this policy when material changes occur.

Analytics and advertising partners

These companies receive information through cookies on tickproof.io and also use it for their own purposes under their own privacy policies:

• Microsoft Corporation (Microsoft Clarity): website analytics and session replays, when analytics cookies are on. See the Microsoft Privacy Statement.
• X Corp.: measuring our adverts on X, when advertising cookies are on and we are running ads on X. See the X Privacy Policy.

Affiliate partners

Where you click an affiliate link to a proprietary trading firm (Apex Trader Funding, MyFundedFutures, Take Profit Trader, NinjaTrader, and others) and sign up, the firm may share a confirmation of the referral with us so we can be paid an affiliate commission. We do not receive your trading activity, balance, or personal details from the firm through this channel.

Legal and safety

We may share personal information if we believe in good faith that it is necessary to:

• Comply with a legal obligation, court order, or lawful request from a public authority
• Protect the rights, property, or safety of TickProof, our users, or others
• Investigate or prevent suspected fraud, abuse, or violations of our Terms

Business transfers

If Centaurian OU is involved in a merger, acquisition, reorganisation, or sale of assets, personal information may be transferred as part of that transaction. We will notify users before personal information is transferred and becomes subject to a different privacy policy.

International transfers

We are based in Estonia (European Union). Some of our service providers are based in or process data from the United States and other countries outside the European Economic Area (EEA).

Where we transfer personal data outside the EEA, we rely on appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where they exist
• Other lawful transfer mechanisms

You can request a copy of the safeguards we rely on by emailing hello@tickproof.io.

How long we keep your information

We keep personal information only as long as we need it for the purposes described in this policy, or as required by law. In practice:

• Waitlist emails — until you unsubscribe, or until we close the waitlist (whichever is sooner), plus a short retention period for record-keeping.
• Account data — for as long as your account is active. If you delete your account, we delete or anonymise associated personal data within 90 days, except where we are required to retain it for legal, accounting, or fraud-prevention reasons.
• Inactive free accounts: if you have a free account and do not sign in for 12 months, we email you 30 days and 7 days before closing it, then delete it. If you confirm your email address but never connect a trading account, we email you after 30 days and close the account after 44 days. An account whose email address is never confirmed is deleted after 7 days. Signing in keeps your account open, and you can restore a closed account by signing in within 14 days of it closing. Accounts on a paid plan are never closed for inactivity. Public verified shares are removed along with the account.
• Marketing email: if you agreed to marketing email, your email address and the record of when you agreed are kept until you unsubscribe, even after the waitlist closes. If you delete your TickProof account, we also remove you from our email lists. If we close an inactive free account under our inactivity policy (see Inactive free accounts above), your marketing email subscription stays in place until you unsubscribe.
• Trade data — kept while your account is active. Deleted with your account, or earlier on request.
• Verified shares — you can delete a verified share at any time.
• Support correspondence — kept for up to 2 years for service quality and audit purposes.
• Aggregate, anonymised analytics — kept indefinitely.
• Microsoft Clarity data — session replays are kept for 30 days, and click and heatmap data for 13 months, then deleted by Microsoft.
• Your cookie choice — remembered for 180 days, after which we ask again.

Your rights

Depending on where you live, you have some or all of the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete information.
• Erasure — ask us to delete your personal data (“right to be forgotten”).
• Restriction — ask us to limit how we process your data.
• Portability — ask us to provide your data in a structured, machine-readable format, or to transfer it to another controller where technically feasible.
• Object — object to processing based on our legitimate interests, including marketing-related processing.
• Withdraw consent — where we rely on consent, withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
• Lodge a complaint — with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee, or with the supervisory authority in your country of residence.

If you live in California or another US state with a consumer privacy law, you also have the right to opt out of the “sale” or “sharing” of your personal information for targeted advertising. Use “Do not sell or share my personal information” at the foot of the site, or turn on Global Privacy Control in your browser, which we treat as an opt-out. We will not treat you differently for exercising any of your rights.

To exercise any of these rights, email hello@tickproof.io. We will respond within 30 days. We may need to verify your identity before acting on requests involving personal data.

Verified shares — public information

The verified-shares feature on TickProof lets you create a public web page that displays performance information drawn from your connected account(s). When you create a verified share:

• The verification page is publicly accessible to anyone with the link or QR code
• The page shows the trade data and summary metrics you have chosen to include
• The page is labelled with the underlying account type (live, evaluation, or paper)

You should only create verified shares from accounts and time windows you are comfortable sharing publicly. You can delete a verified share at any time, which removes the public page within 24 hours.

Cookies and similar technologies

We use a small number of cookies and similar technologies on tickproof.io. These fall into the following categories:

• Strictly necessary — required to operate the site (e.g., session management, security), including the tp_consent cookie that remembers your cookie choice for 180 days. These do not need consent.
• Functional — remember your preferences (e.g., theme, language). Set only with consent.
• Analytics — Microsoft Clarity, which helps us understand how the site is used, including session replays of how visitors move through a page. Clarity sets its own cookies (_clck and _clsk) and Microsoft cookies such as MUID, which Microsoft also uses across its own sites and services.
• Advertising — the X pixel, which tells X when someone who came from one of our adverts on X joins the waitlist, so we can measure our ads. X sets its own cookies and may use the information under its own privacy policy. We only use it while we are running ads on X.

If you are in the UK, the European Economic Area, Switzerland or anywhere outside the United States, analytics and advertising cookies are set only if you accept them. If you are in the United States, they are on by default and you can turn them off at any time; if your browser sends a Global Privacy Control signal, advertising cookies stay off.

You can change your choice at any time from “Cookie settings” at the foot of every page, or block cookies in your browser settings.

Security

We use industry-standard security measures to protect your personal information, including:

• TLS encryption in transit
• Encryption at rest for sensitive fields
• Access controls and audit logging on our internal systems
• Regular security reviews of our infrastructure and third-party providers

No system can be 100% secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and (where required) you, in line with our legal obligations.

Children

The Service is not directed to children. You must be at least 18 years old (or the age of majority in your jurisdiction) to use the Service. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, email hello@tickproof.io and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when the most recent changes took effect. If we make material changes, we will notify you by email (if you have given us your email) or by a prominent notice on the Service before the changes take effect.

Contact us

For privacy questions, data requests, or any other matter related to this policy:

If you are in the EU/EEA, you can also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee.