Privacy Policy
Last updated: 16 October 2026
This policy explains what personal data Trade Governor (the web app at tradegovernor.app and the Trade Governor browser extension) processes, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
Who is responsible for your data
The controller is Lukáš Žulevič, a sole trader registered in the Czech Republic, Company ID (IČO) 09523677, with registered place of business at Blatnická 4219/4, 628 00 Brno, Czech Republic. Contact: [email protected].
What data we process
- Account data from Google sign-in: your name, email address, profile picture and Google account identifier. We never see your Google password.
- Broker connection data (cTrader): the access and refresh tokens issued by cTrader when you connect your account (stored encrypted), the list of your trading accounts (account ID, login number, broker name, live/demo flag, deposit currency) and their balance and equity.
- Data you enter: prop firm accounts you add, risk settings (risk per trade, trade limits), and manual transactions with optional notes.
- Trades placed through Trade Governor: instrument, direction, order type, volume, entry, stop-loss and take-profit prices, the resulting order/position IDs, fill price and status or error.
- Extension access tokens: only a cryptographic hash of each token, its name and creation and last-use dates. The token itself is shown to you once and never stored by us.
- Technical data: IP address, browser information and request logs processed by our hosting and network providers to deliver and secure the service.
The browser extension
The extension stores the app address and your extension access token in your browser's local extension storage. When you click “Load from chart” on a TradingView chart, it reads the position you drew (entry, stop-loss, take-profit) and the chart symbol. These values are sent to Trade Governor only when you ask for a risk calculation or place an order. The extension does not read other websites, your browsing history or anything else on the page.
Why we process it and on what legal basis
- To provide the service — sign-in, connecting your broker, calculating position size and risk, enforcing your limits and placing the orders you request (Art. 6(1)(b) GDPR, performance of a contract).
- To keep the service secure and working — preventing abuse, debugging and protecting accounts (Art. 6(1)(f) GDPR, legitimate interest).
- To meet legal obligations, for example accounting and tax records once paid plans exist (Art. 6(1)(c) GDPR).
We do not sell your data, do not use it for advertising and do not build marketing profiles. Trade Governor blocks or sizes trades only according to the risk rules you set yourself; it makes no automated decisions with legal or similarly significant effects on you.
Who we share it with
We use these service providers (processors) to run Trade Governor:
- Railway (Railway Corporation, USA) — application hosting, in the EU West (Netherlands) region.
- MongoDB Atlas (MongoDB, Inc., USA) — database, hosted on AWS in Frankfurt, Germany.
- Cloudflare (Cloudflare, Inc., USA) — DNS, network security, content delivery, email forwarding and aggregate visitor statistics (Cloudflare Web Analytics, which uses no cookies and does not track individuals).
- Google (Google LLC, USA) — sign-in.
- Sentry (Functional Software, Inc., USA) — error monitoring. Error reports contain technical details of the failure only; we configure it not to send your name, email, cookies, request contents or IP address.
When you connect cTrader or place an order, the relevant data is sent to Spotware (the cTrader platform) and from there to your broker on your instruction. They process it as independent controllers under their own privacy policies. Exchange rates are fetched from a public ECB-based service without any personal data.
The free lot size calculator on tradegovernor.com loads exchange rates straight from your browser from Frankfurter (frankfurter.dev, ECB reference rates). Like any website you visit, that service sees your IP address; the calculator sends it nothing else. The numbers you enter are calculated in your browser and kept only in the page address, so you can bookmark or share a calculation.
Some providers are based in the United States. Transfers rely on the EU–U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
How long we keep it
We keep your data while your Trade Governor account exists. Archived trading accounts stay stored until you delete them or your account. Disconnecting cTrader deletes the stored tokens immediately. When you ask us to delete your account, we delete your data within 30 days, except records we must keep by law. Hosting and network logs are kept by our providers for a limited period.
Cookies and local storage
We use only cookies that are strictly necessary: a sign-in session cookie, security cookies that protect the sign-in and cTrader connection flows, and a browser setting that remembers whether the sidebar is pinned. We use no analytics or advertising cookies, so no consent banner is needed.
Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. To use any of these rights, email [email protected]. We reply within one month.
You can also lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, or with the authority in your EU country of residence.
Security
All traffic is encrypted with TLS. Broker tokens are encrypted in the database with AES-256-GCM, and extension tokens are stored only as hashes. No system is perfectly secure; if a breach affects your data, we will inform you as the law requires.
Age
Trade Governor is intended for adults. Do not use it if you are under 18.
Changes
We will update this page when our processing changes and change the date at the top. Significant changes will be announced in the app or by email.