1. Introduction
At Thorp Systems, operating under the brand Ascentrade ("we," "us," or "our"), we value your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you access or use our cloud-hosted trading utility for journaling, risk rules, copy trading, and AI watchers (the "Service"). We are not a trading platform, brokerage, or custodian; we provide software tooling and utility services.
2. Information We Collect
To provide and secure our trading journal services, we collect the following types of information:
- Registration Information: Email address, username, password, and subscription tier.
- Connected Account Credentials: To sync trade data, you provide login details for MetaTrader 5 (MT5) or API credentials (API keys and secrets) for cryptocurrency exchanges (such as Binance and Bybit). All credentials are fully encrypted and stored securely.
- Location & Security Data: We request and collect location data when you register or log in. This information is used exclusively for account protection, helping us identify suspicious logins and prevent unauthorized access.
- Usage & Interaction Data: We collect information about how you interact with the Service (e.g., buttons clicked, page views, settings adjustments) to improve platform features.
- Device & Technical Information: IP address, browser type, operating system, and device details.
3. How We Use Your Information
We use the collected data for the following purposes:
- Service Delivery: To retrieve, sync, and analyze trade execution histories from your connected accounts.
- Account Security: To verify your location and identify unauthorized access attempts.
- Communications: To send verification codes (OTPs), system updates, and alerts when you configure risk management limits.
- Analytics & Improvement: To evaluate and optimize our application performance, user interface, and user experience.
4. Data Security and Encryption
We implement industry-standard security measures to safeguard your credentials and trading data:
- Encryption: Trading account passwords, API keys, and other sensitive credentials are fully encrypted prior to storage in our databases.
- Access Control: Access to raw system databases is strictly restricted to automated system processes and authorized personnel.
- Transmission: All data in transit is protected using secure HTTPS protocols.
5. Third-Party Service Providers
We partner with specialized third-party services to handle specific operations:
- Payment Processing: Payment transactions are securely processed by Flutterwave; we do not store credit card or bank details on our servers.
- Analytics: We utilize Mixpanel and Metrifox to monitor platform metrics and understand user behavior.
- Push Notifications: We use Firebase Cloud Messaging (FCM) to deliver trade alerts and risk notices.
6. Data Retention and Deletion
We retain your personal information and trade logs only as long as your account remains active. You can request the deletion of your account at any time. Upon deletion, all connected broker credentials, API keys, and historical trading data will be permanently purged from our active databases.
7. User Rights
Depending on your jurisdiction, you may have the right to access the personal data we hold about you, request corrections to inaccurate data, or request the complete erasure of your account data. For inquiries, please contact our support team.