Privacy Policy

TraderOps LLC (“TraderOps,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our automated bookkeeping platform and related services (the “Service”).

By using TraderOps, you agree to the collection and use of your information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

1. Information We Collect

We collect the following types of information to provide and improve our Service:

Personal Information

Your name and email address when you create an account via Google Sign-In
Communication preferences and support interactions
Any additional profile information you choose to provide

Financial Data

Bank account and credit card transaction data (transaction descriptions, amounts, dates, and account identifiers) accessed via our secure Stripe Financial Connections integration
Transaction data you upload via CSV import
Transaction categorizations, budget configurations, and other bookkeeping data you create within the Service
Subscription and billing information processed through Stripe (we do not store your full credit card number)

Usage Information

Device information, IP address, and browser data
Platform usage patterns and feature interactions
Error and performance data to improve our Service

Important: We do not collect Social Security Numbers, tax identification numbers, medical information, or broker/trading platform login credentials. We do not access your bank login credentials at any time — authentication is handled entirely by Stripe and your financial institution.

2. How We Collect Information

Directly from You

Account creation via Google Sign-In
Data you enter into the Service (manual transactions, categorizations, budgets, rules)
CSV files you upload
Support requests and communications

Through Third-Party Integrations

Stripe Financial Connections — secure, read-only access to bank and credit card transaction data, authorized by you during the account linking process
Stripe — payment and subscription processing
Google — authentication via Google OAuth

Automatically

Usage and analytics data collected when you interact with the Service
Error tracking data collected via our monitoring tools

3. How We Use Your Information

We use your information exclusively to provide, maintain, and improve the Service:

Provide secure access to your bookkeeping dashboard and reports
Import, categorize, and organize your financial transactions
Generate reports and export bundles for tax preparation purposes
Process subscription payments and maintain your account
Send service-related communications (account notifications, billing confirmations, product updates)
Monitor platform performance, diagnose technical issues, and resolve errors
Improve the Service based on usage patterns and feedback
Respond to your support inquiries

Anonymized and Aggregated Data

We may create anonymized, de-identified, or aggregated data derived from your information (“Aggregated Data”). Aggregated Data does not identify you personally and is not considered personal information. We may use Aggregated Data to improve our platform, develop new features, and conduct internal research and analysis.

What We Do Not Do

We do not use your data for advertising or marketing to third parties.
We do not sell, rent, or trade your personal information to any third party for their own commercial purposes.
We do not use your financial data for any purpose unrelated to providing the Service.

We only share your information with trusted service providers essential to operating our platform:

Essential Service Providers

Stripe — Secure bank account integration via Stripe Financial Connections (read-only transaction access) and payment processing for subscriptions. View Stripe’s Privacy Policy

Google — Authentication via Google OAuth for account sign-in. View Google’s Privacy Policy

GoHighLevel — Customer relationship management, email communications, and support pipeline processing. Communications sent to support@traderops.io are processed through GoHighLevel.

Google Cloud Platform (GCP) — Secure cloud infrastructure including application hosting, database storage, and file storage.

Sentry — Error monitoring and platform performance optimization. Sentry may receive limited technical data (such as error stack traces and device information) to help us diagnose and resolve issues.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process, such as a subpoena, court order, or government request.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email or prominent notice on our platform before your information becomes subject to a different privacy policy.

5. Data Storage and Security

Technical Safeguards

Encryption of data in transit (TLS/HTTPS) and at rest
Read-only access to bank transaction data via Stripe Financial Connections
No storage of bank login credentials — authentication is handled entirely by Stripe and your financial institution
Role-based access controls and audit logging
Regular security monitoring

Infrastructure

Hosted on Google Cloud Platform (GCP) in the United States
Automated database backups
Continuous security updates and patching

Stripe Financial Connections Security

Your bank accounts are connected securely through Stripe. We request only the transactions permission — we cannot access your balances, ownership details, or account numbers beyond what is necessary to import transaction data. You authorize this access during the account linking process and can revoke it at any time.

While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention and Deletion

Different categories of data are subject to different retention periods based on the type of data and our legal obligations. We are transparent about these distinctions so you understand what happens to your information when you cancel your account.

6.1 Application Data (Retained While Active, Deleted 30 Days After Cancellation)

The following data is stored in TraderOps systems and is under our direct control:

Your bookkeeping records, transaction categorizations, and reports
Bank account connections and related metadata (we do not store account numbers or login credentials)
CSV uploads and derived data
Your preferences, settings, and in-app configurations

Retention: For as long as your account is active. Upon account cancellation, this data is retained for a 30-day grace period to allow you to reactivate and restore access. After 30 days, this data is permanently deleted from our systems.

6.2 Personal Identifiers (Anonymized 30 Days After Cancellation)

The following personal identifiers are stored in our application database:

Your name
Your email address
Any phone number you provided

Retention: For as long as your account is active. Upon account cancellation, after the 30-day grace period, these fields are anonymized — your name is replaced with a generic placeholder, your email is replaced with a non-identifying internal reference, and your phone number is removed. Your user record is preserved for audit trail integrity, but your personal identifiers are no longer retrievable.

6.3 Payment and Transaction Records (Retained for 7 Years)

The following records are processed and stored by Stripe, our payment processor, and are subject to legal recordkeeping obligations that supersede user deletion requests:

Subscription history
Invoices and payment receipts
Payment method details (last 4 digits, card brand, expiration — full card numbers are never accessible to us)
Transaction history and chargeback records

Retention: A minimum of 7 years following your last transaction, as required by U.S. Internal Revenue Service recordkeeping regulations (26 CFR § 1.6001-1), Massachusetts Department of Revenue requirements, and Stripe’s own regulatory obligations under anti-money-laundering and financial services laws.

This retention is not optional. Even if you request deletion of your account, federal and state tax law requires us and Stripe to preserve records of financial transactions for the applicable retention period. This is a well-established exception to data deletion rights under both U.S. state privacy laws and the European Union General Data Protection Regulation (GDPR Article 17(3)(b)).

6.4 Aggregated and Anonymized Data

Data that has been fully anonymized or aggregated so that it no longer identifies you personally may be retained indefinitely for analytics, product improvement, and research purposes.

6.5 Returning Customers

If you cancel your account and later return to TraderOps using the same email address, we will automatically link your new account to your prior payment history via our payment processor. This allows us to honor any existing subscription-level protections (such as one-time promotional offer limits) and maintain a continuous billing record. If you return using a different email address, a new payment profile will be created and prior promotional protections will not carry forward.

7. Your Rights

Access and Control

View, update, or correct your account information through your dashboard settings at any time.

Data Export

Export your financial data and reports at any time through the Service’s built-in export functionality.

Account Deletion

Request deletion of your account and associated data by contacting us at support@traderops.io. Application data (§6.1) will be permanently deleted within 30 days of your request. Personal identifiers (§6.2) will be anonymized. Payment and transaction records (§6.3) will be retained for 7 years as required by law, then deleted.

If you are a resident of the European Economic Area, United Kingdom, California, Virginia, Colorado, Connecticut, Utah, or another jurisdiction with applicable data protection laws, you may have additional rights including:

The right to access the personal data we hold about you
The right to correct inaccurate personal data
The right to request deletion of your personal data (subject to the legal retention exceptions described in §6.3)
The right to restrict or object to certain processing
The right to data portability
The right to lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at privacy@traderops.io. We will respond within 30 days. For requests involving deletion, we will:

Verify your identity before processing the request
Delete or anonymize data we control per §6.1 and §6.2
Decline deletion of payment and transaction records retained under legal obligation per §6.3, with written documentation of the legal basis
Confirm the scope of deletion and retention in writing

Marketing Communications

Opt out of marketing communications at any time by following the unsubscribe instructions in any marketing email. Service-related communications (such as billing confirmations and security alerts) are not subject to opt-out.

Sale of Personal Information

We do not sell your personal information to any third party.

8. Cookies and Tracking

We use cookies and similar technologies to operate and improve the Service. For detailed information about the types of cookies we use and how to manage them, please see our Cookie Policy.

9. Children’s Privacy

TraderOps is designed for adults and is not intended for individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we discover that a user under 18 has created an account, we will promptly delete their account and associated data.

10. International Users

TraderOps is designed for users in the United States and operates under U.S. data protection laws. If you access the Service from outside the United States, including from the European Economic Area or United Kingdom, you do so at your own initiative and are responsible for compliance with your local laws and regulations.

By using the Service, you consent to the transfer of your information to the United States, where data protection laws may differ from those in your country of residence. Where required by applicable law, we rely on Stripe’s Standard Contractual Clauses and other legal mechanisms to safeguard international data transfers.

Residents of the European Economic Area, United Kingdom, and other applicable jurisdictions retain the rights described in §7, including the right to lodge a complaint with your local data protection authority.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or the Service. When we make material changes, we will:

Update the “Last Updated” date at the top of this policy
Notify you via email if you have an active account
Post a notice on our platform

Continued use of TraderOps after changes become effective indicates your acceptance of the updated policy.

12. Contact Us

General Privacy Questions

Email: support@traderops.io Response Time: Within 48 business hours

Email: privacy@traderops.io Response Time: Within 30 days as required by applicable law

TraderOps is a bookkeeping tool. We do not provide tax, financial, or legal advice. For questions about your specific tax situation, consult a qualified tax professional.