Privacy
Last updated .
Who runs RIFT
RIFT is run by RIFT TRADE JOURNAL LIMITED, a company registered in England and Wales (company number 17466539), which is the controller of the data described here. Contact: info@rifttradejournal.com.
If you join the waitlist
The form on the home page collects one thing: an email address. It is stored so that you can be told when access opens. That is the only reason it is kept and the only thing it is used for.
It is not sold, not shared with anyone, not added to a newsletter, and not used to advertise to you anywhere else. There is no tracking pixel in the confirmation and there will not be one in whatever email you eventually receive.
Alongside the address, the server records the time it was submitted and a one-way hash of the connecting IP address. The hash exists to rate limit the form so it cannot be used to flood the list; it cannot be turned back into an address, and it is not used to identify you.
To have your address removed, reply to any message you receive, or write to the contact address on the terms page. It will be deleted, not flagged as unsubscribed.
This website
There is no analytics, no tracking, no advertising and no cookies on this site. The only third-party request a page makes is to Google Fonts, which serves the two typefaces. Nothing else is loaded from anywhere else.
We check that the website and the app are up with UptimeRobot, which requests a page the way a visitor would. It receives nothing about you.
The demo
The demo at demo.rifttradejournal.com holds invented trades belonging to an invented trader. Anything you type into it (notes, tags, drawings, questions to Mira) is stored in that demo's own database and deleted every night when the demo is rebuilt. It has no connection to any real trading account.
If you use the product
RIFT is a trading journal, so when you connect a broker it holds your trading history: instruments, prices, sizes, times and results, plus whatever you write in the journal yourself.
- cTrader's access to your account is encrypted before it is stored and is never returned by any part of the interface. An MT4 or MT5 password is not stored at all.
- A file you import is read to add your trades and is not kept afterwards.
- Your trades are used to produce your own analysis and nothing else. They are not aggregated with anyone else's, not sold, and not used to train anything.
- Mira sends the statistics of your trading, and the journal notes you attach to a trade, to Anthropic's API to generate a reply. It never sends your name, email address, broker credentials or account numbers.
- Anthropic, which provides the model behind Mira, does not use what RIFT sends through its API to train its models.
Signing in
If you sign in with Google, Google tells us your email address, your name as it appears on your Google account, and an identifier for that account. We keep those three things to recognise you when you come back. We do not receive your contacts, your files or anything else from Google.
If you sign in with an email address and a password, we keep the address and a one-way hash of the password, never the password itself. The app sets cookies only to keep you signed in and to complete a broker connection; they are not used for anything else.
Your broker
cTrader connects through cTrader's own sign-in, with read-only access. RIFT never sees your cTrader password, and the access it is given is encrypted before it is stored.
For MT4 and MT5, you give the account's read-only investor password. RIFT passes it once to MetaApi, the service that connects to your broker and reads your history, and does not store it. RIFT can only read your trading history: it cannot place, change or close trades.
MetaApi is run by HLC Cloud LLC, 1309 Coffeen Avenue, STE 1200, Sheridan, Wyoming 82801, USA. When you connect an MT4 or MT5 account, RIFT sends MetaApi your account number, your broker's server and your investor password. MetaApi stores these on its servers in the UK and the US so it can sign in to your broker and read your trading history for RIFT. HLC Cloud LLC is a US company, so these details and your trading history from that account are transferred to the United States. RIFT does not keep the password: once MetaApi has it, RIFT discards it. With the investor password the connection is read-only, so it can see your trades but cannot place or close orders or move money.
Payments
Payments are handled by Paddle, our merchant of record. Your card or other payment details go to Paddle and never reach RIFT. Paddle tells us which plan you are on, whether your payments are up to date, and the currency, so the app can show your plan.
We send account email (confirming your address, resetting your password, and reminders before a trial or founding Pro ends) through Postmark, which receives your email address and the message. You can turn the plan reminders off in Settings.
Backups
The database is backed up every night. Backups are encrypted before they leave the server, are kept for 30 days with Backblaze, and are then deleted.
Deleting your data
Write to info@rifttradejournal.com from the email address on your account and we will delete the account and everything in it: your trades, your journal, Mira's notes and your broker connections. Copies in backups go as those backups expire, within 30 days.
Changes
If this policy changes in a way that affects what is collected or why, the date at the top will change with it.