Legal
Privacy Policy
CoreStep LLC ("CoreStep," "we," "us," or "our") provides a trading analytics and journaling platform. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It should be read alongside our Disclosures page.
By using CoreStep, you agree to the collection and use of information as described here.
1. Information We Collect
Account Information
name, email address, password (hashed, never stored in plain text), and any profile details you provide when you register.
Broker & Trading Data
when you connect a brokerage or trading account (currently including TradeStation, Tradovate/NinjaTrader, and brokers available through SnapTrade), we receive and store trade history, order history, positions, account balances, and related account identifiers, as authorized by you through that broker's connection flow (OAuth or credential-based login, depending on the broker). We request read-only access wherever the broker's permission model allows it.
Usage Data
how you interact with CoreStep, including pages visited, features used, and actions taken within the app, collected to improve the product and diagnose issues.
AI Feature Data
if you use CoreStep's AI features (including the AI Coach and Rall-E), your conversations, trade context, and related inputs are processed via our AI provider (Google Gemini) to generate responses. Session history may be stored to preserve conversation continuity.
Payment Information
if you subscribe to a paid tier, payment is processed by a third-party payment processor. CoreStep does not store your full payment card details.
2. How We Use Information
We use collected information to:
- •Provide, operate, and maintain the CoreStep platform
- •Sync, display, and analyze your trading activity
- •Power AI features you choose to use
- •Communicate with you about your account or updates to the service
- •Monitor and improve platform performance and security
- •Comply with legal obligations
We do not use your trading data to trade on your behalf, and CoreStep never places trades or modifies orders using the access you grant — all broker connections are used for reading and displaying your history only, unless a future feature explicitly states otherwise and requests separate permission.
3. How We Store & Protect Information
Your data is stored using Supabase (PostgreSQL) with row-level security policies restricting access. Broker credentials and access tokens are encrypted at rest. Access to production data is restricted to authorized CoreStep personnel only, and database changes are reviewed before being applied to production systems.
No method of electronic storage is 100% secure, and we cannot guarantee absolute security, but we take reasonable, industry-standard measures to protect your information.
4. Third-Party Services
CoreStep integrates with the following categories of third-party services, each of which has its own privacy practices:
- •Brokerage/Trading Platforms — TradeStation, Tradovate/NinjaTrader, and brokers connected via SnapTrade, for account and trade data
- •AI Services — Google Gemini, for AI Coach and Rall-E features
- •Infrastructure — Supabase (database), Render (backend hosting), Vercel (frontend hosting)
- •Market Data — Polygon.io, for historical market/chart data used in backtesting and chart overlays
We do not sell your personal information or trading data to third parties.
5. Data Retention
We retain your account and trading data for as long as your account is active, or as needed to provide the service. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required by law.
6. Your Rights
Depending on your location, you may have the right to:
- •Access the personal data we hold about you
- •Correct inaccurate data
- •Request deletion of your data
- •Export your data
- •Disconnect any linked broker account at any time, which revokes CoreStep's access to that account's data going forward
To exercise any of these rights, contact us at the email below.
8. Children's Privacy
CoreStep is not directed at individuals under 18, and we do not knowingly collect information from anyone under 18.
9. Changes to This Policy
We may update this Privacy Policy from time to time.
10. Contact Us
Questions about this Privacy Policy can be directed to: corestep.journal@gmail.com
This document also incorporates by reference the risk, performance, and trademark disclosures found on our Disclosures page.
Trading futures, options, and other leveraged financial instruments involves substantial risk of loss and may not be suitable for all investors. Past performance is not necessarily indicative of future results. CoreStep is a trading analytics and journaling platform and does not provide investment, financial, or trading advice.