1. What we collect
Account data. Email address and a hashed password (we never see or store your raw password). For traders accessing Vera Charts through a partner prop firm, we receive a signed handoff token from the partner that identifies the trader account; we do not collect a separate email/password from you in that flow.
Trading activity. Orders you place, fills the engine records, simulated balances, position history, drawing tools and chart layouts you save. This is the operating record of your account on the platform.
Technical metadata. Standard server-side request logs (IP address, user agent, timestamps) used for security, debugging, and rate-limiting; first-party analytics events used to understand product usage in aggregate; cookies for authentication and preferences.
Payment metadata. If you pay Vera Charts directly for a product (not via a partner firm), Stripe handles the card data; we receive only a payment token and high-level metadata (amount, currency, status). We do not store card numbers.
2. How we use it
Operating the platform: serving charts and live data, matching simulated orders, persisting your account state across sessions, providing customer support when you ask for it. Security: detecting abuse, fraud, and rule violations. Product improvement: aggregate analytics on which features are used, which markets are popular, and where the platform is slow.
We do not use your personal data to train machine-learning models, and we do not sell, rent, or trade it to third parties.
3. Sharing with partner firms
If you access Vera Charts through a partner prop firm (CryptoPropX, FundedWithForex, or another partner), we exchange account state and rule events with that partner over signed webhooks. The partner firm already knows you (you have an account with them); we send them information about your simulated trading activity on the platform so they can run their evaluation or funded-account program. Each partner firm has its own privacy policy governing how it handles your data on its side.
4. Subprocessors
We use a small set of well-known infrastructure vendors to run the platform: Supabase (managed Postgres + authentication), Fly.io (application hosting), Cloudflare (CDN, DDoS protection), Upstash (Redis cache and webhook queue), Stripe (when you pay us directly), and aggregated market-data providers (whose specific identities are kept confidential). Each subprocessor processes data only as needed to provide its service, under its own published terms.
5. Where data is stored
Primary database is hosted in the United States (us-east-1) with encrypted read replicas in the EU and Asia-Pacific regions for latency. All data is encrypted at rest and in transit (TLS 1.2 or better). Webhook payloads to partner firms are signed with HMAC and carry an idempotency key so the partner can detect replays.
6. Your rights
You can request a copy of the data we hold about you, request its deletion, correct inaccuracies, or object to specific processing. Email privacy@veracharts.com with the request and we will respond within 30 days. If you accessed Vera Charts through a partner prop firm, you may also need to make the same request to that firm for the data they hold on their side.
EU and UK residents have additional rights under GDPR/UK-GDPR (lawful-basis disclosure, the right to lodge a complaint with a supervisory authority). California residents have rights under the CCPA/CPRA (right to know, delete, correct, and opt out of sale, the last of which we do not engage in).
7. Cookies
We use cookies for authentication (keeping you signed in), to remember your trading preferences (selected market, chart layout), and for first-party analytics. We do not embed third-party advertising cookies. Your browser's privacy controls can clear or block cookies; doing so may prevent you from staying signed in.
8. Children
Vera Charts is not directed at children under 18, and we do not knowingly collect data from children. If you believe a child has created an account, contact us at the privacy address above and we will remove the data.
9. Changes to this policy
We may update this policy as the product evolves. Material changes will be communicated via email to active users and a banner on the platform. The version stamp at the top of this page indicates when the current text was last issued.
10. Contact
Privacy questions: privacy@veracharts.com. General correspondence: hello@veracharts.com. Postal address available on request.