Privacy Policy

Scope and contact

This Privacy Policy applies to the TickTaco trading journal, decision-intelligence features, integrations and related websites (collectively, the “Service”). TickTaco is operated by Tom Warzybok, an individual operating under the TickTaco name.

The data controller responsible for the processing described in this Privacy Policy is Tom Warzybok, an individual operating under the TickTaco name.

Data controller contact
Tom Warzybok
Kraoul Seh, Autoch Village
Sangkat Andong Khmer
Krong Kampot 07-801
Cambodia
Email: marketing@ticktaco.app

Data we process

Depending on the features you use, we process the following categories:

• Account and profile data: email address, authentication details, profile settings, language, account role, access tier and promotional-code status.
• Trading records and results: instruments, order or trade identifiers, direction, size, prices, timestamps, profit and loss, commissions, swaps, account references and calculated performance statistics.
• Journal and mental-state data: notes, tags, session descriptions, checklists, ratings and self-reported mental-state or trading-psychology assessments.
• Screenshots: images you choose to upload to a note or session and the associated storage references.
• Integration data: data imported or synchronized from MT5, cTrader or NinjaTrader 8, together with information needed to connect, authenticate, diagnose and operate the integration.
• AI data: questions, instructions, selected journal or trading context sent to an AI feature, generated responses and usage information used to apply feature limits.
• Technical and security data: IP address, browser and device information, request timestamps, authentication events, diagnostic information, error and security logs, and similar data needed to deliver and protect the Service.
• Communications: messages and information you send when requesting support, reporting an issue or exercising a privacy right.

TickTaco does not currently collect or store payment-card details or process subscription charges because public paid subscriptions are not currently available.

Where data comes from

We receive data directly from you, from your use of the Service, from devices and browsers that connect to the Service, and from trading platforms or integration tools you choose to connect. If you use Discord sign-in, Discord provides the account information you authorize it to share for authentication.

Why we process data

We process data to:

• create and authenticate accounts; import, store and display trading data; calculate analytics; save notes and screenshots; provide AI features; and apply Free, trial or promotional access;
• secure and maintain TickTaco, prevent abuse, investigate incidents, debug errors and preserve service integrity;
• answer requests, send essential service or security notices and administer access codes; and
• comply with valid legal requests, enforce our Terms and establish, exercise or defend legal claims.

Depending on the activity and applicable law, we rely on performing our agreement with you, our legitimate interests in operating and securing the Service, your consent, or a legal obligation. Where consent is required, you may withdraw it for future processing.

Cookies and local storage

TickTaco uses browser storage, and may use cookies, for functions such as authentication sessions, security, language and interface preferences, temporary promotional-code handling and restoring locally saved AI chat history or settings. Some of this information remains on your device until you clear it through the Service or your browser.

These technologies are used to provide and secure requested features. You can clear cookies and local storage in your browser, but doing so may sign you out or reset saved preferences and locally stored AI history.

Service providers and other recipients

We disclose data only as needed for the purposes described in this Policy:

• Supabase provides account authentication, database and backend functions used to operate TickTaco.
• Cloudflare provides website delivery, security and R2 object storage used for screenshots you upload.
• OpenRouter acts as an AI gateway when you invoke current AI features. It may forward the request to the selected model provider, which processes the prompt and supplied context to generate a response.
• Discord receives and provides data if you choose Discord sign-in or interact with the official TickTaco community.
• Trading platforms and integration tools exchange data with TickTaco when you choose to connect or import from MT5, cTrader or NinjaTrader 8. Those third parties process data under their own terms.
• Professional advisers and authorities may receive data when reasonably necessary for legal advice, compliance, security, fraud prevention or a valid legal process.

Service providers may process data only for the contracted services or as otherwise permitted by law. TickTaco does not sell personal data.

AI processing

When you use an AI feature, TickTaco sends your prompt and the trading or journal context selected for that request through our backend to OpenRouter, which acts as an AI gateway. OpenRouter may forward the request to the selected model provider, which processes the prompt and supplied context to generate a response. Do not include unrelated personal data or information you do not want processed for an AI response.

Current AI chat history is stored in your browser’s local storage for continuity on that device. TickTaco also processes AI usage records to enforce feature limits and operate the Service. Generated responses may be inaccurate and should not be treated as investment advice.

International data transfers

Our providers may process data in countries other than the country where you live. Where required, we use contractual or other legally recognized safeguards for international transfers. You may contact us for more information about safeguards relevant to your data.

Retention and deletion

We keep account and service data while your account is active and for as long as reasonably needed to provide the Service. Specific records may be retained longer when necessary for security, fraud prevention, dispute resolution, backups or legal obligations. We delete or anonymize data when it is no longer needed for these purposes.

Screenshots remain stored until you remove them, delete the associated content or account, or ask us to delete them, subject to reasonable backup and security periods. Locally stored preferences and AI history remain on your device until you clear them or your browser removes them.

Security

We use technical and organizational measures intended to protect data, including access controls, authenticated requests, encrypted network transport and service monitoring. No online service can guarantee absolute security. You are responsible for protecting your credentials and devices and for notifying us if you suspect unauthorized access.

Your choices and rights

Depending on where you live, you may have the right to request access to your personal data, correct inaccurate data, delete data, restrict or object to processing, receive a portable copy, withdraw consent, or complain to a data-protection authority. These rights may be subject to legal conditions and exceptions.

To request access, correction or deletion, email marketing@ticktaco.app from the address associated with your account. We may need to verify your identity before completing a request. You may also remove individual notes or screenshots through available product controls.

Children

TickTaco is not directed to children under 18. If you believe a child provided personal data without valid authorization, contact us so we can review and delete it where required.

Changes to this Policy

We may update this Policy when the Service, providers or legal requirements change. We will publish the revised version with a new “Last updated” date and provide additional notice when required.

Contact

Privacy questions and requests may be sent using the data controller contact details below.

Data controller
Tom Warzybok
Kraoul Seh, Autoch Village
Sangkat Andong Khmer
Krong Kampot 07-801
Cambodia
Email: marketing@ticktaco.app