← Back to TradeFlow

Privacy Policy

Last updated 13 October 2026

Who is responsible for your data

Shikadey Jarrett, trading as TradeFlow, 77 Roxeth Green Avenue, Harrow, HA2 8AB, United Kingdom, is the controller of your personal data. Contact: support@tradefloww.com.

The short version

Your Telegram account, your own chats, your MetaTrader 5 login and your trading history stay on your computer. Our servers hold your TradeFlow account, your plan, whom you follow and the records of providers' calls. We never see your card number or your broker password, and we do not sell your data.

What stays on your computer

  • Your Telegram session and the messages in your chats.
  • Your MetaTrader 5 login, broker, balance, positions and trading history.
  • Your trade log, risk settings and Account Guard limits.

What we hold on our servers, and why

  • Your account: email address, password (stored encrypted by our authentication service) and two-factor settings. Needed to provide the service.
  • Your plan: plan, subscription status, licence key and your customer reference at Stripe. Needed to provide the service and to bill you.
  • Payments: amounts, dates, refunds and disputes, as Stripe reports them. Needed for billing and kept to meet tax and accounting law.
  • Whom you follow: the providers and strategies you follow, and when you followed or unfollowed. Needed to send you their calls.
  • How you found us: if you arrived through a referral link, its code. Remembered between pages only if you allowed the referral cookie (your consent); recorded with your account when you sign up, to pay that provider any agreed share of plan revenue (our legitimate interest in running provider partnerships).
  • Security records: sign-in and admin activity logs. Used to protect accounts (legitimate interest).

Your email address and a password are needed to create an account; without them we cannot provide the service. Everything else above is created as you use TradeFlow. Stripe tells us about your payments; we receive no data about you from anyone else.

If you are a provider

  • Your application, public profile, strategies, community links and the sources you connect.
  • The calls posted in your connected channels, read by TradeFlow to build your record and to deliver them to your followers. Your record is public only with your consent.
  • Review decisions about you (approval, Established, Verified, suspension) with their reasons.
  • If you have a revenue-share agreement: its terms, the share recorded for each payment, and your payout details, which Stripe holds for paying you.

What the desktop app sends us

The app signs in to your TradeFlow account, checks your licence, reads the list of sources you follow and downloads their calls. It does not upload your Telegram messages, your MetaTrader 5 login or your trades.

Telegram access

To read calls, the app signs in to Telegram as you, the same way Telegram Desktop does. That session is stored only on your computer. TradeFlow only acts on sources you have chosen. Logging out from Settings deletes the session file.

Who processes data for us, and where

  • Supabase: database and sign-in. Data stored in Ireland (EU).
  • Vercel: website hosting. Requests may be processed in the United States.
  • Stripe: payments and payouts, in the UK, the EU and the United States.

Where data leaves the UK, it is protected by the UK's adequacy rules for the EU, and by the UK-US data bridge or the UK International Data Transfer Addendum for the United States. We do not sell your data and we do not share it with advertisers.

How long we keep it

  • Your account and follows: while your account is open. Ask us to close it and we delete them within one month, apart from what the law requires us to keep.
  • Payment records: 6 years, as UK tax law requires.
  • A provider's record, decisions and revenue-share records: while they are a provider, then 6 years.
  • Security logs: only as long as needed to protect accounts and investigate problems.

Cookies

We set a cookie to keep you signed in, and a referral cookie only if you allow it. We use no advertising, analytics or tracking cookies. Details are in the Cookie Policy.

How we protect it

All traffic is encrypted (HTTPS). Passwords are never stored in readable form. Access to the database is limited to the TradeFlow service and its administrator, and two-factor sign-in is available on every account. Card details are handled by Stripe and never reach us. If a breach of your data is likely to put you at high risk, we will tell you without undue delay, and we report breaches to the ICO where the law requires.

Decisions about you

We make no decision with a legal or similarly significant effect on you by automated means alone. Provider approvals, standing and suspensions are decided by a person.

Age

TradeFlow is for adults aged 18 or over. We do not knowingly hold data about anyone younger.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, ask us to restrict how we use it, object to how we use it, or ask for it in a portable form. Where we rely on your consent, you can withdraw it at any time. Email support@tradefloww.comand we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

If we change this policy, we update the date at the top. If a change affects how we use data we already hold about you, we will tell you by email before it applies.