Privacy policy
What we store about you, and why.
This page is an inventory, not a formula: every row below corresponds to something the service actually saves or to a provider it actually uses. If it is not here, we do not do it.
On this page
1. Who is responsible
The data controller is Simone Benetti, VAT number (P.IVA) 04454200249, Via del Cornale 5, 36049 Sovizzo (Vicenza), Italy. For anything about your data write to [email protected].
2. The data we hold
| What | Details |
|---|---|
| Account | First and last name, email address, a one-way hash of your password (we cannot read the password), the language you chose, the date and the version of the terms you accepted, the date you last used the app. If you sign in with Google there is no password on our side: we store the identifier of your Google account instead, and we copy its profile photo once, when the account is created, as your profile photo (see Screenshots). |
| Your work | Strategies, backtest sessions, trades (backtest and journal), notes, tags, checklists, the preferences of the journal and of the backtest, and the onboarding answers. |
| Where you came from | Recorded once, when you sign up, from the link you arrived with: its campaign tags (the utm parameters), the website that sent you, the page of our site you signed up from, and whether you came from an ad on Google, Meta, TikTok or Microsoft (the platform only, not the identifier of the click). From the browser of that same request we also read, once, whether you signed up from a phone, a tablet or a computer, and whether it was the built-in browser of an app such as Instagram or TikTok (the app's name only, nothing about the device itself), and the language your browser asks for pages in (its language setting, such as pt-BR), which tells us which languages to add to the app. A copy of all of this except the language goes with each payment, so we can tell which channels bring paying users. |
| The creator who sent you | If you create your account from a creator's link, or make your first payment with a creator's code, we record which creator, once (corrected once if, before any commission exists, you pay with another creator's code). From then on that creator earns a share of what you pay, and sees each of your payments as a line with its date, your plan, whether it is monthly or yearly, what the payment left after fees, the rate applied and what they earned, under a number in place of your name. They never see your name, your email address or anything you do in the app. |
| Screenshots | The chart images you attach to a trade and, if you add one, your profile photo (cropped to a 256 pixel square), stored as WebP files on Cloudinary. Replacing or removing the photo deletes the previous file. |
| Reports | The Flow Coach reports and the Trader Profile: the numeric summary that was computed and the text that was written from it. |
| Billing | Your Stripe customer identifier, the state of your subscription (plan, interval, dates), a log of payments (amount, currency, date, invoice number, whether it succeeded) and, if you cancel, the reason you picked plus the note you may write with it, which we keep and also send to Stripe with the cancellation. Never a card number: Stripe holds those. |
| The creator programme | Only if you are invited to it: the address the invite went to, your name, your code, the date and the version of the programme terms you accepted, the commissions recorded for you and the payouts you asked for and received. Bank details and invoices travel by email and are not stored in the app. |
| Email log | For every email we send you: the kind, the address, the date, whether it was delivered, bounced or marked as spam, and your choice about product emails. |
| Security tokens | A password reset token (hashed, valid one hour, used once) when you ask for one; the sign-in token is kept in your browser's local storage, not on our side. |
| Pine Script requests | On the Max plan: the name and the description of the indicator you ask for, the Pine Script source you paste, and the code we deliver. |
| Support | The emails you write to us, for as long as it takes to answer and to keep a record of what was agreed. |
The market data you replay (historical candles) is not personal data; it comes from our data providers and is the same for everyone.
3. Why we hold it
- To run the service you signed up for (the contract): the account, your work, the screenshots, the reports, the billing, the security tokens, the requests.
- Because the law requires it: the billing records, for the time tax law asks us to keep them.
- Because we have a legitimate interest in keeping the service working and safe, and in knowing which channels bring people to it: the email log, the date of last use, the technical logs of the servers, where your account came from.
- With your consent, which you can withdraw at any time: the product emails (a report that is ready, a reminder). Emails about your account and your payments are part of the contract and always arrive.
We do not profile you, we do not sell data, and we do not show advertising.
4. Who processes it for us
| Provider | What they do | What they see |
|---|---|---|
| Stripe | Payments, invoices, the customer portal | Name, email, billing address, card details (which we never see), the subscription. |
| MongoDB Atlas | The database | Everything in the table above except the screenshot files and the card details. |
| Render | Hosts the application server | The data passing through the server, and technical logs with IP addresses. |
| Cloudinary | Stores the screenshots | The image files. |
| OpenAI | Writes the Flow Coach reports and the Trader Profile, drafts strategy descriptions, transcribes dictation | A numeric summary of your statistics (never your notes or your screenshots), the text of a strategy you ask to describe, the audio you dictate (transcribed and not stored). Requests are made under an API agreement that excludes training on your data. |
| Resend | Sends our emails | Your email address, the content of each email, delivery events. |
| Identity provider, only if you choose "Sign in with Google" | That you signed in to BacktestFlow with that Google account. From Google we receive your name, your email address and the address of your profile photo, once, when the account is created. | |
| Cloudflare | Hosts this website and the domain's DNS | Technical request data (IP address, page requested) for the website only. |
5. Where it is stored
The database and the application server are in the European Union (Frankfurt). Stripe, OpenAI, Cloudinary, Resend and Google are companies based in the United States: the data they process for us is covered by the European Commission's standard contractual clauses and, where the provider is certified, by the EU-US Data Privacy Framework.
6. How long we keep it
- Account and your work: for as long as the account exists. When you ask us to delete it, everything is removed within 30 days, except what the next line covers.
- Billing records: ten years from the payment, as Italian tax law requires, in a form that no longer links to a live account.
- Screenshots of inactive accounts: we may delete them after a long period without use, and only after telling you by email and in the app at least 30 days before, with a way to download them.
- Email log: twelve months.
- Password reset tokens: one hour, or until used.
- Server logs: a few weeks, as long as the hosting provider keeps them.
7. Your rights
You can ask to see the data we hold about you, to correct it, to receive a copy in a machine-readable form, to have it deleted, to limit how we use it, and to object to a use based on our legitimate interest. Product emails can be turned off from Settings or from the link at the bottom of any of them.
To delete the account, write to [email protected] from the address of the account; a button in the app will follow. We answer every request within 30 days. If you think we handled your data badly, you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, or to the authority of the country where you live.
8. Security
Passwords are hashed with bcrypt. Every connection to the site and to the app is encrypted. Card details never reach our servers. Access to the database is limited to the people who run the service. When you change or reset your password, every other device is signed out.
9. Cookies and storage
This website sets no cookies and runs no analytics. When you arrive with a campaign link, the links of the site carry its tags in the address itself, up to the signup; nothing is written on your device. The app keeps your sign-in token and your preferences in your browser's local storage, which is what makes it work. The details are on the cookies page.
10. Children
The service is for people aged 18 or over. We do not knowingly hold data about anyone younger; if you think we do, write to us and we delete it.
11. Changes to this policy
Every version has a date, shown at the top of this page. If a change matters to you, we write to you before it applies.
Contact
For anything about this page, your account or your data, write to [email protected]. A person reads it.
- Seller
- Simone Benetti
- VAT
- VAT number (P.IVA) 04454200249
- Address
- Via del Cornale 5, 36049 Sovizzo (Vicenza), Italy
- [email protected]
- Version
- 2026-10-12