Who we are
Papertrade (papertrade.world) is a free paper-trading simulator operated by Vishal (vishalb.dev) in the United States ("we", "us"). This policy covers the website, the web app and the MCP / API service that AI apps connect to. Questions or requests: contact@papertrade.world.
What we collect
- Account details. Your email address and password. Passwords are handled by our authentication provider and stored only in hashed form; we can't see them.
- Simulator data. The simulators you create (name, market, broker, virtual capital, dates), your watchlists, the virtual orders and positions, and the results reports built from them.
- AI connections. The API keys you create (stored as a one-way hash, plus an encrypted copy so you can copy the key again), the AI apps you approve and when, and a log of the tool calls those apps make on your behalf, including what they asked for (for example a stock symbol and quantity), so you can review them on the Connect AI page.
- Usage analytics. Pages viewed, the referring site, approximate country, device and browser type, and a few product events (for example "account created", "simulator created", "order placed", "AI connected", with the market or broker involved). These come from Vercel Web Analytics, which is cookieless and doesn't follow you across other websites. Events never include your email, name or the amounts you trade.
- Technical logs. Like any website, our hosting provider records IP addresses and request details for security and to keep the service running.
We do not collect payment details, bank or brokerage account details, or government ID, and we never place real trades.
How we use it
- To create and run your account and simulators, and to show you your results.
- To let the AI apps you connect act for you, and to show you what they did.
- To keep the service secure, prevent abuse and fix problems.
- To understand, in aggregate, how the product is used (for example how many people sign up) so we can improve it.
- To contact you about your account or important changes to the service, if we need to.
Where the GDPR or UK GDPR applies, we rely on: performing our contract with you (running your account), our legitimate interests (security, aggregate analytics, improving the product), and your consent where we ask for it.
Advertising
We may promote Papertrade with ads on platforms such as Instagram and Facebook (Meta). Today the site uses no advertising cookies or pixels, so we don't share your activity on our site with ad networks. If we add an advertising pixel or similar tool, we will update this policy and, where the law requires, ask for your consent first. How ad platforms use your data on their own services is covered by their privacy policies.
Who we share it with
We don't sell your personal information. We share it only with:
- Service providers that run the service for us: Vercel (hosting and analytics) and Supabase (database and sign-in), under their data processing terms.
- Market data providers (Yahoo Finance, and Zerodha Kite for Indian markets where connected). They receive only the stock symbols and dates needed for prices, never your personal details.
- Logo images. Company and broker logos are loaded by your browser directly from Financial Modeling Prep and Google's favicon service. Like any image on the web, those requests include your IP address and browser details.
- AI apps you connect. They can read and change your simulators through the access you grant, and they handle that data under their own terms. You can disconnect them at any time on the Connect AI page.
- When the law requires it, or to protect the rights, safety or property of our users or the public.
Where your data is processed
Our providers process data in the United States and other countries. Where data leaves the EEA, UK or another region with transfer rules, we rely on the safeguards our providers offer, such as standard contractual clauses.
How long we keep it
We keep your account and simulator data while your account is open. If you ask us to delete your account, we delete your personal data within 30 days, except where we must keep something to meet a legal obligation. Aggregate analytics that can't identify you may be kept longer.
Your rights and choices
Depending on where you live, you may have the right to:
- access the personal data we hold about you, or get a copy of it;
- correct it if it's wrong;
- delete it and close your account;
- object to or restrict some uses, and withdraw consent you've given;
- complain to your local data protection authority.
California residents (CCPA/CPRA): you can ask to know, delete or correct your personal information. We don't sell personal information or share it for cross-context behavioural advertising, and we don't use sensitive personal information. We won't treat you differently for using these rights. India (DPDP Act) and other regions: you can make the same requests.
To make a request, or to delete your account, email contact@papertrade.world from the address you signed up with. We'll reply within 30 days.
Security
We use encrypted connections (HTTPS), hashed passwords and API keys, and access controls on our database. No system is perfectly secure, so please use a strong, unique password.
Children
Papertrade is meant for adults. It isn't directed to anyone under 18, and we don't knowingly collect data from them. If you believe a child has signed up, email contact@papertrade.world and we'll delete the account.
Changes to this policy
We'll update this page when our practices change and revise the date at the top. For significant changes we'll give notice on the site or by email.
Contact
Vishal (vishalb.dev), operator of Papertrade. Email contact@papertrade.world.