Trading Desk
Privacy
How the Trading Desk app handles your data. Trading Desk runs on your own computer, never connects to a broker or exchange account, and never places an order. Last changed 15 November 2026.
Who is responsible
The provider named in the imprint. Questions and requests: futureinvoked@proton.me.
What stays on your computer
Your portfolio, watchlist, journal, research, settings and the desk's database stay in the desk's own folder in your user account. So do the data sources' caches.
Your licence key is checked on your computer against a public key built into the app. Nothing is sent anywhere to activate it, and there is no activation server. The key is never written to the desk's logs.
The free trial's start date is kept in that folder and in your Keychain (macOS) or Credential Manager (Windows).
If you sign in to OpenAI from the desk's Settings, Codex keeps that sign-in in the desk's folder too.
Version 1.1: every brief and alert is also kept in the desk's own inbox, in its database, for 180 days, with the result of each channel you turned on. Neither the inbox nor its delivery log holds a secret. The notices the Trading Desk app shows on your computer stay on it: macOS or Windows shows them, and nothing leaves. In the paid edition they are on by default, and you can switch them off in Settings.
Version 1.1: the secrets of the channels you set up (a Telegram bot token, a WhatsApp access token, a webhook address) and the key for a second price source are kept in your Keychain (macOS) or Credential Manager (Windows), not in the desk's database, its settings or its logs.
Version 1.1: the desk's own schedule is off until you turn it on in Settings, and it runs only while you are logged in. It makes two launchd agents on a Mac, or two tasks in Task Scheduler on Windows, that start the app without its window. They hold the app's path, the job's name and, if the desk has its own home folder, that folder's path, which can contain your account name. Their logs are in the desk's folder and hold no portfolio data. The scheduler talks to no one, and a scheduled job does what the same job does when you run it by hand. Settings → Schedule → Remove deletes them; on a Mac, deleting the app does not, so remove the schedule first.
CSV import and export work on files on your computer, and the import preview makes no network call.
The app has no analytics, no crash reporting and no update checks of its own. On Windows, the window is drawn by Microsoft's WebView2, which follows your Windows diagnostic-data settings. A Microsoft Store copy is updated by the Store.
What leaves your computer, and to whom
Market data sources. Yahoo Finance gets the tickers of your portfolio and watchlist and anything you look up (a ticker, a company name or an ISIN), and sets a cookie the desk keeps and sends back. Where Yahoo first asks for cookie consent (in the EU), the yfinance library the desk uses answers Yahoo's consent form with “agree” so that Yahoo returns data. Google News gets a search per holding and watchlist name. SEC EDGAR, CoinGecko and Binance's public market data get lookups by symbol, and Amundi the ISIN of a fund you hold that it prices. FRED, the ECB, Wikipedia, alternative.me, the economic calendar (faireconomy.media) and the news feeds are fetched without anything about you. No quantity, cost or value is sent to any data source.
AI providers, only if you use the AI features. They run through your own Claude Code or Codex install and account, under Anthropic's or OpenAI's terms. A request carries the ticker's public data and your portfolio as weights and percentages. The AI provider sees tickers, weights and percentages, including your percentage gain since cost (which, with the price, shows the price you paid per share), and never how many shares you hold or any amount in money. Your own notes (thesis cards, watchlist reasons) are sent with any line removed that looks like an amount or carries one of your own figures. Deep research makes web searches through the provider's own tools.
Ask the desk (version 1.1), only if you use it. You write a question in plain words and the desk shows you the exact text before anything is sent. Every line that looks like an amount or a quantity, or that carries one of your own figures, is replaced first, and a question with nothing left is not sent. What goes to the AI provider you chose for this task, Anthropic through your Claude Code sign-in or OpenAI through your Codex sign-in, is that text, the desk's rules for the answer and the list of conditions it may use. Not your portfolio, watchlist, notes or files, and the model has no tools, so no web search. The run is recorded in the desk's own run log on your computer. The research number check in deep research compares figures on your computer and sends nothing.
Notification channels (version 1.1), only the ones you switch on in Settings. A channel receives the morning brief's text and each alert that went out, with its source link: tickers, percentages, market prices, your holdings as a percentage of your portfolio and, when an alert names them, price levels you set yourself. Never how many you hold, what you paid or what your holdings are worth. Nothing is sent to a channel until you have saved its token or address.
Telegram (api.telegram.org): the messages go to your own bot. Telegram's servers carry them and they are not end-to-end encrypted, so Telegram can read them. Anyone with the bot token can send as the bot and read what is sent to it, and in a group every member can read the messages.
WhatsApp, through Meta's WhatsApp Cloud API (graph.facebook.com): the desk sends the text to Meta, which hosts the business number and passes the message on to you. Meta can read it, because the message is not end-to-end encrypted between the desk and Meta. Setting it up needs your own Meta developer account and business portfolio.
A webhook: the text goes to the web address you enter, which could be ntfy.sh or your own server. Whoever runs that server can read it. The address is allowed for that one send only and does not join the desk's list of hosts.
A second price source (version 1.1), only if you add your own key. When Yahoo does not answer, the desk can ask EODHD (eodhd.com) for daily prices of the few symbols involved. EODHD receives the ticker symbols, in its own codes, your key and your computer's IP address, as with any web request; never quantities, costs, values, names or your portfolio. With no key saved nothing is sent there. EODHD takes the key as part of each request's web address, so the desk keeps it out of its logs and error messages. The desk ships no key; the account and its terms are yours.
When you buy a key
Stripe, through its Link service, sells the key as merchant of record: it receives your e-mail address, payment details and the billing details needed for tax, and handles payment, VAT, invoices and refunds. If you buy an upgrade, the Beginner order reference you enter at checkout goes to Stripe too.
Resend sends the e-mail with your key: it receives your address and the e-mail, which contains your key and its activation link.
Trading Desk's licence service (on Cloudflare) keeps, per order, a hash of the key (not the key), the tier, the date, whether the e-mail went out, refunds and upgrade links. For a Beginner order it also keeps a keyed hash of your e-mail address, so that an upgrade bought with the same address can be matched; it never keeps your address or your key. The same keyed hash is inside your key, so a key can be traced to its order by the seller and by no one else.
The website gettradingdesk.com
The site sets no cookies, has no forms and does not track visitors. Its pages are served by Cloudflare, which handles your IP address to deliver them.
Campaign links to gettradingdesk.com carry a short tag in the address (for example ?c=news). The site counts page loads from such links, and clicks on the download buttons, as daily totals per tag. It keeps no IP address, browser details, referring page, full address or visitor ID, and stores nothing on your device.
If you buy a key, or get the Windows app, from a link with a tag, the tag is passed to Stripe or the Microsoft Store as a reference on that order or install. The Microsoft Store handles its side under Microsoft's own terms.
Your rights
You can ask what we hold about you, and have it corrected or deleted, at futureinvoked@proton.me. Everything on your computer is yours to keep or delete: removing the desk's folder removes it. If you are in the EU, you can also complain to your data-protection authority.