Legal
Privacy Policy
What Meridian Signal Desk collects, why, who else sees it, how long it is kept, and what you can ask us to do with it. In short: only what the copier needs to work for you, never sold, never used for advertising.
Last updated: [Date]
This policy describes how [Licensor Legal Entity Name] ("we", "us") handles personal data when you use Meridian Signal Desk — this website, the dashboard, the NinjaTrader AddOn and the service behind them. We are the data controller for that data.
1 · What we collect
Your account. Your user id, name, email address, an optional phone number, your password (stored only as a salted hash), and your two-factor setting if you switch it on. When you signed up, signed in and accepted the License. For each dashboard sign-in, the IP address and the browser it came from — so you can see where your account is signed in and be alerted to a sign-in from a browser you have not used before. A session's record ends with the session, at most 12 hours later. An alert about a new browser keeps that sign-in's IP address and browser in your alert history (your latest 200 alerts) and behind its "That wasn't me" link for 7 days. Of the browsers you have used we keep only a fingerprint (a one-way hash).
What the copier reports. The NinjaTrader account names on your PC, their positions, orders, fills and profit and loss, the copier's journal of what it did, and the settings you choose. This is the core of the service: without it the dashboard cannot show you anything.
Your signals. When a TradingView alert (or any sender) posts to your signal address we record when it arrived, the sender's IP address, what became of it, and a fingerprint of its content — not the content itself, and never your secret.
What you add. Trade notes and tags, prop-firm cost and payout records, alert settings (including a Telegram bot token, a phone number for calls and phone notification registrations, if you set them up), and an AI provider key if you choose to use AI insights.
Billing. Your plan, any coupon, and the references our payment provider gives us for your subscription. Your card details are entered with and held by the payment provider; we never see or store them.
Technical logs. Our web server records requests (time, IP address, address requested, result) to keep the service secure and working. Signal secrets are masked in these logs.
No tracking. This website and the dashboard use no analytics, advertising or tracking cookies and no third-party trackers. The dashboard keeps your sign-in and a few display preferences in your own browser's storage.
2 · Why we use it
To provide the service you signed up for (the contract between us); to keep it secure and prevent abuse (our legitimate interest in running a safe service); to send the messages the service depends on — confirmations, password resets, the copier alerts you switch on, trial and billing notices; and to meet legal and accounting obligations. We do not sell personal data, use it for advertising, or make automated decisions about you that have legal effects.
3 · Who else receives it
Only the services that make Meridian work, each for that purpose alone:
- Hosting — the service runs on servers rented from Akamai (Linode) in the United States.
- Payments — our payment provider processes subscriptions and payments and may act as the reseller of record.
- Notifications you switch on — Telegram (if you connect a bot), the push services of your browser or phone (Apple, Google or Mozilla), and a calling provider if you set up phone escalation.
- AI insights, only if you add your own key — a summary of your trading statistics is sent to that AI provider (Groq) under your own account with them.
We disclose data to authorities only where the law requires it. A public track record exists only if you switch it on, and shows aggregate results — never your name, account names or individual trades.
4 · How long we keep it
For as long as your account is open. Ask us to close it (email below) and we delete your account and its trading data, except what we must keep for tax and accounting (billing records, kept as the law requires). Backups roll off within [backup retention period]. Web server logs are kept for at most [log retention period].
5 · Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Much of it you can see and change yourself on the dashboard. For anything else, email hello@meridiansignaldesk.com from the address on your account; we answer within 30 days. If you are in the EU, the UK or another place with a data protection authority, you may also complain to it.
6 · Security
Connections are encrypted (TLS). Passwords are salted and hashed, every account's signal address carries its own secret, two-factor sign-in is available, a sign-in from a new browser is reported to you, and each copier PC holds its own key. No system is perfectly secure; if a breach affected your data we would tell you as the law requires.
7 · International transfers
The service is hosted in the United States. If you use it from elsewhere, your data is transferred there, with the safeguards the law requires for that transfer.
8 · Children
Meridian is for adults trading futures. It is not directed at anyone under 18 and we do not knowingly collect their data.
9 · Changes and contact
We will post any change here with a new date, and email you about a significant one. Questions: hello@meridiansignaldesk.com, or write to [Licensor Legal Entity Name], [Business address].