Privacy Policy
Passo Trading reads only your own trading data, never places orders on your behalf, and never sells your data. Last updated: October 26, 2026.
1. Who we are
Passo Trading ("Passo Trading", "we", "us") is a trading journal available at app.passotrading.com, with a public website at passotrading.com. It is operated by Eran Maron, Israel. You can reach us at [email protected].
2. Data we collect
- Account data. Your email address and a password. The password is stored by our authentication provider in hashed form; we never see it in clear text.
- Trading data you import from files. The contents of the exports you upload, such as orders, fills, prices, quantities, times, account names, and cash history entries (commissions, fees, realized profit and loss entries and fund transactions).
- Trading data read from Tradovate, only if you choose to connect. After you approve access on Tradovate's own authorization screen, we read your list of trading accounts (names and identifiers), your orders and their versions, fills, fees (commission, exchange, clearing and NFA fees), cash history entries, the contract identifiers needed to show symbols, and reports of past activity for the period you choose. This access is read-only.
- Data you enter. Your trading rules, rule compliance marks, day notes, journal entries, instrument settings and preferences.
- Technical data. IP addresses, browser type and request logs kept by our hosting and database providers for security and operation, and the minimal browser storage needed to keep you signed in and to run the Tradovate connection.
3. What we never collect or do
- We never ask for, receive or store your Tradovate username or password.
- The Tradovate access token is kept only in your browser's memory while you use the app. It is not stored in our database. Our server-side function that completes the Tradovate sign-in passes the token, and the addresses of the Tradovate servers for your account, back to your browser and does not keep them.
- We never place, modify or cancel orders, and we never act on your behalf.
- We do not collect market data.
- We do not sell or rent personal data, and we do not use advertising or tracking cookies.
4. How we use your data
- To provide the journal: show your trades, statistics, discipline scores and rule tracking.
- To import your data without duplicates and, while you are connected, keep it up to date.
- To secure the service, prevent abuse and fix problems.
- To answer your messages and support requests.
- To meet legal obligations.
We do not use your trading data to trade, to give advice, or to market other products, and we make no automated decisions about you with legal or similar effects.
5. Legal bases
Where the EU or UK General Data Protection Regulation applies, we rely on: performing our contract with you (providing the service); your consent (connecting Tradovate, which you can withdraw at any time by disconnecting); our legitimate interests (security and fraud prevention); and legal obligations.
6. Who we share data with
We share data only with providers that process it on our behalf to run the service:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication and server functions (Sydney, Australia) |
| Cloudflare | Website hosting, DNS, email routing and spam protection on the contact form |
| Resend | Sending replies to contact form messages |
When you connect Tradovate, data flows from Tradovate to us at your request; Tradovate's own privacy policy governs its services. We may disclose data when the law requires it. We do not share data with anyone else.
7. Retention and deletion
- We keep your data while your account is active.
- You can undo any import, which deletes the data that import added.
- You can disconnect Tradovate at any time; we then stop reading new data. You can also delete all data that was read from Tradovate.
- When you delete your account, we delete your data within 30 days, unless the law requires us to keep it. Backups held by our database provider are overwritten within 30 days.
- Contact form messages are kept in our mailbox only as long as needed to answer them, and no longer than 12 months.
8. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, to restrict or object to its use, and to withdraw consent. Write to [email protected]; we may need to verify your identity. You can also complain to your data protection authority (in Israel, the Privacy Protection Authority).
9. Security
All traffic uses HTTPS. The database enforces per-user access rules, so each user can reach only their own records. Access to production systems is limited. No method of storage or transmission is fully secure; we will notify you of a breach as the law requires.
10. International transfers
Our providers may process data outside your country, including in the United States and in Sydney, Australia. Where required, we rely on the safeguards our providers offer, such as standard contractual clauses.
11. Cookies and browser storage
We use only the browser storage needed to keep you signed in and to run the Tradovate connection: a single-use check that protects the Tradovate sign-in, and a daily count of report requests. The contact form uses Cloudflare Turnstile to block spam, which processes limited device data. We use no advertising cookies.
12. Children
Passo Trading is not intended for anyone under 18, and we do not knowingly collect their data.
13. Changes
We will post changes on this page and update the date above. For material changes, we will notify you by email or in the app before they take effect.
14. Contact
Eran Maron, Israel, [email protected].