Privacy Policy

Information we collect

TiltLock collects the information needed to create and secure an account, save risk settings, connect supported trading services, and operate the risk guard.

• Account information, such as a name, email address, and authentication records.
• Connection information, including broker account identifiers, connection status, and encrypted authorization tokens.
• Trading account activity required to evaluate user-defined limits, including orders, fills, positions, and realized account performance.
• Risk settings, lock schedules, time zone preferences, and account selections.
• Security, reliability, and audit logs, including timestamps, errors, and actions taken by the risk guard.

How information is used

• Operate the service and enforce the limits a user configures.
• Authenticate users and maintain secure broker connections.
• Cancel working orders or request position liquidation when an enabled limit is reached and the user has granted permission.
• Investigate errors, prevent abuse, improve reliability, and provide support.
• Meet legal, regulatory, security, and contractual obligations.

Broker credentials and tokens

TiltLock uses supported authorization flows when available. Users sign in with the broker, not inside TiltLock. TiltLock does not request or store a user's broker password. Authorization tokens are stored on the server and protected with encryption; they are not intentionally exposed to browser code.

Sharing and selling

TiltLock does not sell personal information or redistribute broker market data. Information may be shared with infrastructure, security, payment, and support providers only as needed to operate the service, or when required by law.

Retention and deletion

Information is kept only as long as reasonably needed to provide the service, maintain security and audit records, resolve disputes, and meet legal obligations. Users may disconnect a broker connection at any time. Account deletion requests will remove or de-identify information unless retention is legally required.

Security

TiltLock uses access controls, encryption, server-side authorization, and operational monitoring intended to protect user information. No internet service can guarantee absolute security, and users should protect their own account credentials and devices.

Children and changes

TiltLock is not intended for children. This policy may be updated as the service changes. Material changes will be identified by a new effective date and, when appropriate, an in-product notice.

Contact

Privacy questions and account requests can be sent to gettiltlock@gmail.com.