Privacy Policy
Last updated — October 8, 2026
What We Collect
When you create a Tanto account we collect your email address and basic profile information. When you connect a brokerage account we receive trade data (executions, positions, and account balances) through that broker's API. We also collect standard usage data such as page views, feature usage, and device information to help us improve the product.
How We Use It
We use your data to provide and operate the Tanto service — importing trades, generating analytics, and displaying your journal. We also use aggregated, anonymized data to improve the product. We will never sell your personal information.
Broker Connections
Tanto connects to brokerages using read-only OAuth where available. We never ask for or store your brokerage password. Access tokens are encrypted at rest and are used solely to sync your trade data.
Third Parties
We use Stripe to process payments. Stripe receives your payment details directly — we never see or store your full card number. Beyond Stripe and the broker APIs you choose to connect, we do not share your data with third parties.
Data Storage
Your data is stored on secured, encrypted infrastructure. We use industry-standard practices to protect your information including encryption in transit (TLS) and at rest.
Your Rights
You can delete your account at any time from your account settings. Deleting your account permanently removes your data from our systems. If you'd like to request a data export before deleting, contact us and we'll provide one.
Tanto Trade Journal browser extension
What it does. The extension reads your completed trades from a trading platform you have turned on, while you have that platform open in Chrome, and sends them to your Tanto account.
What it sends to Tanto. For each account: the platform's account id, account type (main, evaluation, funded) and the account's name as the platform shows it. For each trade: the platform's position id and order id, the symbol, side, quantity, price, time, fee, and for a closed position its realized PnL and funding. The extension's own version number and a status (syncing, logged out, paused).
What it never sends. Your platform password or session token. Your balance, margin, open orders or order book. Any page content outside the trade list. Your browsing on any other site. The platform session token stays inside the platform's page and is used only to read the trade list; it is never stored, logged or sent anywhere.
Where it goes. To Tanto's servers, under your Tanto account, where it is stored like a CSV import. Nothing goes to any third party. Nothing is sold or used for advertising.
What it stores on your computer. A Tanto install token for this browser and which platforms you turned on. Removing the extension removes both.
How to stop it. Turn a platform off from the extension icon (its site permission is removed), disconnect the browser from Tanto's Connect Platform pane, or remove the extension. Deleting the Tanto account the trades were added to deletes them.
Questions: [email protected]
Contact
Questions about this policy? Reach us at [email protected].