Privacy Policy
Last updated: 20 July 2026
This policy explains what PulseWatch ("the Service", "we") collects,
why, and what we will never do with it. We have tried to keep it short and honest.
What we collect
- Account data: your email address and a cryptographically hashed
password (we cannot read your password).
- Trading account data: the nickname you give each account and, as
reported by the monitoring EA you run in your own terminal: account login number,
broker server name, platform, balance, equity, margin figures, currency, leverage,
and a snapshot of open positions. We keep a rolling history of balance/equity points
for charts; open-position details are held in memory only and are not stored.
- Trade history & money movements: the EA also reports your last
30 days of closed trades (symbol, direction, volume, close price, profit, close time)
and non-trading balance operations (deposit, withdrawal and transfer amounts and
times). These power the trade-history, daily-stats and day-P/L features and the
CSV exports.
- Never collected: your broker password, investor password, or any
credential that could access or trade your account. The EA is read-only and the
Service has no ability to place, modify, or close trades.
- Alerts: if you connect Telegram, we store your Telegram chat id
so we can message you.
- Payments: handled by Stripe. Your card details go directly to
Stripe and never touch our servers; we store only your Stripe customer and
subscription references and their status.
- Cookies: one session cookie to keep you signed in. No advertising
or cross-site tracking cookies.
- Technical logs: standard server logs (IP address, request time)
kept briefly for security and abuse prevention, e.g. login rate-limiting.
How we use it
- To show you your own dashboard and history.
- To send the emails you'd expect: verification, password reset.
- To send the alerts you asked for (margin levels, connection loss).
- To bill the accounts you add beyond your free one.
Who we share it with
Only the processors needed to run the Service: our hosting provider (runs the
server and database), Cloudflare (serves the site and stores our nightly database
backups), Stripe (payments), Resend (transactional email), and
Telegram (alert delivery, only if you link it). We do not sell or rent your
personal data to anyone.
How we may make money
Transparency about our business model, present and future:
- Subscriptions — the primary model: your first trading account is
free and additional accounts are paid.
- Advertising — we may in future show advertisements or sponsored
placements in the Service. If we do, advertisers will never receive your personal
data or your trading data; any ad targeting would be contextual (shown to all
users alike), not based on your accounts.
- Affiliate and partner links — we may include links to third-party
products (for example brokers, VPS providers, or trading tools) and earn a
commission if you use them. Such links will be recognisable as promotions, and
using them is always optional.
- Aggregated, anonymised statistics — we may compile and publish or
commercialise statistics derived from usage of the Service (for example, "average
margin level across all monitored accounts"). Such statistics are always aggregated
across many users and stripped of anything that could identify you, your accounts,
or your individual positions or balances.
What will not change: we will never sell personally identifiable data, and we
will never give any third party access to your individual trading data. If our
monetisation practices materially change, we will update this policy and note the new
date above; continued use after an update constitutes acceptance.
Retention and deletion
- Equity history, closed trades, money movements, and daily statistics are kept
for at most 90 days, then deleted automatically (older equity
history is progressively thinned before that).
- Removing a trading account deletes all of its stored data — history, trades,
money movements, and daily statistics — immediately.
- We keep nightly backups of the database on a 7-day rotation for disaster
recovery, so deleted data can persist in a backup for up to 7 more days before
it is overwritten.
- To delete your entire user account and all associated data, contact us at the
address below; we will complete deletion within 30 days. Payment records required
for tax and accounting law are retained by Stripe per their policy.
Security
Passwords are hashed with scrypt; session and push-key secrets are stored hashed;
all traffic is encrypted in transit (HTTPS); push keys are bound to a single trading
account login. No system is perfectly secure — please use a unique password.
Contact
Privacy questions or deletion requests: [email protected]