Privacy Policy

Tapeboard LLC ("Tapeboard," "we") operates the market terminal at tapeboard.com. We are the data controller for personal data described in this policy. Contact: [email protected].

Account data. Email address, password hash, display name if you set one, and account creation timestamp.

Billing data. Subscription tier, billing email, and payment metadata returned by Stripe (last four digits of card, card brand, country, billing ZIP). We do not store full card numbers; Stripe holds that data.

Usage data. Pages visited inside the app, scanner presets you save, watchlists, alerts you create, paper-trading positions, and timestamps of these actions. Used to operate the product and improve it.

Technical data. IP address, browser type, OS, device type, referrer, and Tapeboard cookies. Captured in server logs and Sentry error reports.

Communications. Emails you send to support, including their content, so we can respond.

We do not collect brokerage credentials, do not connect to your broker, do not store your trades from any real account, and do not sell or rent your data.

• Run the product: authenticate you, deliver real-time data, save your presets and alerts.
• Bill you and prevent payment fraud, through Stripe.
• Send transactional emails (receipts, security notices, product updates you opt into).
• Debug errors and improve performance, through Sentry and aggregated usage analytics.
• Comply with legal obligations and enforce our Terms of Service.

• Contract. Most processing is necessary to provide the service you signed up for.
• Legitimate interests. Security monitoring, error tracking, and product analytics, balanced against your rights.
• Consent. Marketing emails (opt-in only) and any non-essential cookies.
• Legal obligation. Tax, accounting, and lawful requests from authorities.

We use a small number of first-party cookies for authentication and to remember your preferences (theme, layout). We use Cloudflare for edge caching and bot mitigation, which sets functional cookies. We do not use advertising cookies. We do not embed Facebook, Google, or TikTok pixels.

You can clear cookies in your browser at any time. Clearing the auth cookie will sign you out.

We share the minimum data needed with the following processors. Each is bound by a data-processing agreement.

• Stripe: payment processing and fraud detection. Receives billing data.
• Cloudflare: hosting, CDN, DDoS protection. Sees IP and request metadata.
• Sentry: error monitoring. Receives error stack traces and limited request context, with PII scrubbing enabled.
• Schwab, Yahoo Finance, Finnhub, FRED, Financial Modeling Prep, TwelveData, SEC EDGAR: market and reference data providers. We send symbol queries on your behalf; we do not transmit your identity to them.

We do not sell personal data and do not share it with advertisers.

Tapeboard is operated from the United States. If you access the service from outside the US, your data is transferred to and processed in the US. Where required, transfers from the EEA, UK, or Switzerland rely on Standard Contractual Clauses with our processors.

• Account data: kept while your account is active. After cancellation, retained for 90 days then deleted.
• Billing and tax records: 7 years (US tax requirement).
• Server access logs: 30 days.
• Sentry error data: 90 days.
• Support emails: 2 years.

If you are in the EEA, UK, or Switzerland (GDPR): you have the right to access, rectify, delete, restrict, port, and object to processing of your personal data, and to withdraw consent. You can also lodge a complaint with your local data protection authority.

If you are a California resident (CCPA/CPRA): you have the right to know what we collect, the right to delete, the right to correct, the right to limit use of sensitive personal information, and the right to opt out of sale or sharing. Tapeboard does not sell personal information and does not share it for cross-context behavioral advertising.

To exercise any right, email [email protected] from the address on your account. We respond within 30 days (45 for CCPA, extendable to 90 with notice). We will not discriminate against you for exercising a right.

Self-serve: you can export your data and delete your account from account settings.

Passwords are hashed with bcrypt. Data in transit is encrypted with TLS. Production data sits on Cloudflare and is access-controlled. We do not store payment-card numbers on our servers. No system is perfectly secure; in the unlikely event of a breach affecting personal data we will notify affected users without undue delay and within 72 hours where required by law.

Tapeboard is not directed at children under 13 and we do not knowingly collect data from them (COPPA). The service is not intended for users under 18. If you believe a child has given us data, email [email protected] and we will delete it.

We do not respond to browser Do Not Track signals because there is no industry standard for them. Our cookie practices, described above, apply regardless of DNT.

We may update this policy. Material changes will be announced by email or in-app notice. Effective date is the "Last updated" date at the top.

Privacy questions, data requests, and complaints: [email protected]. Mail: Tapeboard LLC, Delaware, USA.