Privacy Policy

Information We Collect

• Account information (email, name) when you sign up
• Broker connection credentials. Where the broker supports OAuth (for example Tradovate) we hold access and refresh tokens and never see your password. Where the broker does not support OAuth (for example Rithmic) we hold the username and password you enter, encrypted before storage, because the connection cannot be maintained without them. See our Security & Reliability page.
• Trading activity data - orders, fills, positions and P&L - for synchronization, risk enforcement and your trade journal
• Support conversations, including transcripts of chats with the in-app AI assistant

How We Protect Your Data

• Broker credentials are encrypted by Qloner before they are written to storage, so they are never held in plain text
• All data is encrypted at rest by our cloud provider using AES-256, and in transit using TLS
• The key that decrypts your credentials is held in a managed secrets store, separately from the data it protects, and is readable only by the services that need it
• Each connected account's automation runs with its own isolated network identity, so your accounts do not share a footprint
• Where your broker supports OAuth, we never receive your broker password, and you can revoke Qloner's access from the broker at any time

Data Usage

We use your data solely for:

• Synchronizing trades between your accounts
• Providing customer support
• Improving our platform functionality

We do not sell your personal data. We share data with third parties only as needed to operate the connections you authorize - for example, transmitting your orders to the brokers and accounts you connect.

Why We Are Allowed to Process It

• To perform our contract with you - connecting your accounts, copying your trades, and enforcing the risk limits you set. Without this data the service cannot work
• Our legitimate interests - keeping the platform secure, preventing abuse, and diagnosing faults
• Your consent - where we ask for it separately, such as optional product emails. You can withdraw it at any time
• Legal obligation - where we are required to keep records, for example for tax or accounting

How Long We Keep It

We keep your data for as long as your account is open. You can delete a broker connection at any time from the app, which removes its stored credentials.

Deleting your account erases your data, not just your login. In one step we remove your account record, your broker connections and their stored credentials, your order and P&L history, your journal entries, your activity feed, your notifications, your risk history, and your conversations with the AI assistant. If any part of that fails, your account is deliberately left in place so the deletion can be retried rather than half-completed.

Two things we keep: records we are legally required to hold, such as billing and tax records (these are held by Freemius as the seller), and anonymous assistant messages sent before you signed in, which carry no account and cannot be matched to you.

Your Rights

You can ask us to give you a copy of your data, correct it, delete it, send it to you in a portable format, or stop a particular use of it. Email support@qloner.com and we will respond within 30 days. We will not charge you or make the service worse for asking.

If you are in the EEA or the UK and you think we have handled your data badly, you can complain to your national data protection authority. If you are in Israel, that is the Privacy Protection Authority.

Where Your Data Is, and Who Else Touches It

Qloner is operated from Israel and runs on Amazon Web Services in the United States. Israel holds an adequacy decision from the European Commission, which means personal data can move from the EEA to Israel without additional safeguards.

We use a small number of providers to run the service:

• Amazon Web Services - hosting, storage, and the managed secrets store
• Freemius - our merchant of record, which processes your payment and holds your billing details. We never see your card number
• Google - only if you choose to sign in with Google
• Your brokers and trading platforms - the connections you authorize

We do not sell your personal data, and we do not share it for advertising.

Tracking and Cookies

We run no analytics, no tracking pixels, and no advertising cookies. We do not profile you and we do not build an advertising picture of you. The only things Qloner stores in your browser are the ones the app needs to work - your theme choice, your account ordering, and which notices you have dismissed. That is why you have never seen a cookie banner here.

Third-Party Connections

When you connect a broker, trading platform, or prop-firm account, Qloner exchanges data with that provider to authenticate your session and mirror your trades. That data is also handled under the provider's own privacy policy and terms, which we do not control and are not responsible for. The third-party names and logos shown on our site are the property of their respective owners and do not indicate any data-sharing partnership beyond the connections you explicitly authorize. See our Trademarks & Third-Party Notices.