Privacy policy

How we handle your data.

Last updated: 2026-06-24

1. Who we are

FlowTrade Capital ("FlowTrade", "we", "us") operates the open-source trading platform available at flowtrade.app. Registered office: Bahnhofstrasse, 6300 Zug, Switzerland. Contact: privacy@flowtrade.app.

2. Data we collect

Account data: email address, hashed password (handled by Supabase Auth using bcrypt), display name and the role assigned to your account. Trading data: wallet balance, open positions and orders, and the strategies you have created or saved. Technical data: IP address and user agent strings, kept for short-lived rate limiting and abuse prevention.

3. Why we process it

We process your data to provide the service you asked for (Art. 6(1)(b) GDPR / contractual necessity), to keep the platform secure and prevent abuse (Art. 6(1)(f), legitimate interests) and where required by law. We do not sell personal data and we do not use it for behavioural advertising.

4. Where data is stored

Account and trading data are stored in Supabase (Postgres) hosted in the EU (Frankfurt). The web frontend and edge functions run on Cloudflare Workers and may be served from the closest edge location. No data is transferred to jurisdictions without an adequate level of protection.

5. Subprocessors

Supabase Inc. (database, authentication), Cloudflare Inc. (hosting, edge runtime, DNS), Resend (transactional email) and BTCPay Server (only when you actively use the BTC deposit flow on the wallet page).

6. Retention

Account and trading data remain stored as long as your account exists. When you delete your account, the user record, profile, role, wallet, positions and strategies are deleted within 30 days. Aggregated, fully anonymous telemetry may be retained for analytics.

7. Your rights

You may at any time request access to, correction of, export of, or deletion of your personal data. You may withdraw consent and lodge a complaint with the competent supervisory authority (in Switzerland: EDÖB; in the EU: your national DPA). Write to privacy@flowtrade.app — we answer within 30 days.

8. Cookies

We use only strictly necessary cookies (session cookie issued by Supabase Auth, theme and language preference in localStorage). No analytics, advertising or third-party tracking cookies are set.

9. Changes

Material changes will be announced in the changelog and, where appropriate, by email to registered users.

This document is provided for transparency about the FlowTrade platform. It does not replace bespoke legal advice for your jurisdiction.