Security

Your broker tradebook is parsed entirely in your browser. Only the computed round-trips, metrics and journal content you choose to save are sent to us, so your raw broker file generally never leaves your device.

All traffic between your browser and our servers is encrypted using TLS. Data is encrypted at rest, and sensitive secrets such as broker connection credentials are encrypted using AES-256-GCM.

Access to production systems is restricted to authorised personnel on a least-privilege basis, protected by strong authentication. Application access is scoped so that you can only access your own data.

Subscription payments are handled by our PCI-DSS-compliant payment partner (Razorpay). We do not store full card numbers or banking credentials on our systems.

We host on reputable cloud infrastructure with logging and monitoring, apply security updates, and follow secure development practices including code review and dependency management.

If you believe you have found a security vulnerability, please report it privately to security@tradefolie.com with enough detail to reproduce the issue. Please do not publicly disclose it until we have had a reasonable opportunity to investigate and remediate. We appreciate and acknowledge good-faith researchers.

In the event of a personal data breach affecting you, we will act promptly to contain and remediate it and will notify affected users and the Data Protection Board of India as required under the DPDP Act, 2023.

Security is shared. Use a strong, unique password, keep your devices secure and your browser updated, and never share your login. Notify us at security@tradefolie.com if you suspect any unauthorised access to your account.