Your data stays tied to the service you asked for.
This policy explains what is processed, why it is needed, who supports the service and the controls available to you.
1. Controller and contact
Fraheat Ltd, company number SC812220, trading as FRA Prop HQ, is the controller for personal data described in this policy. Registered office: 31 Swift Brae, Livingston, Scotland, EH54 6GY. Contact: support@fraprophq.com.
2. Information we process
We may process account identity, email, profile and membership details; prop-account identifiers, labels, balances, positions, orders, fills, completed trades and performance statistics; rule settings; payout records; sync and error logs; notebook entries, strategies, grades, emotions, tags and screenshots; trader-score snapshots, behavioural signals and trade-chart execution metrics; support messages; Stripe customer, subscription and invoice identifiers; referral attribution, affiliate commission and payout records; and device or browser information needed for security and troubleshooting.
We do not store full payment-card details or a customer’s Tradovate trading password.
3. Why we use information
We use personal data to provide and secure the service, perform membership contracts, authenticate users, sync authorised accounts, calculate analytics, manage billing and affiliate attribution, respond to support, prevent abuse, improve reliability and meet legal, tax and accounting obligations.
Our lawful bases can include performance of a contract, legal obligation, legitimate interests in operating and protecting the service, and consent where required for an optional activity.
4. Tradovate and account syncing
When you authorise a supported provider login, access tokens are received server-side and encrypted before storage. FRA Prop HQ requests account, balance and completed-trade information needed for the product. It does not request order-placement permission. You can disconnect the connection from the product.
5. Coach
When Coach is used, selected trading records, journal context, prompts and an optional chart image can be sent through a Supabase Edge Function to OpenAI to generate a response. The API key remains server-side. Coach is not used to make decisions that produce legal or similarly significant effects.
6. Billing, emails and optional notifications
Stripe processes Checkout, card payments, invoices and the billing portal. FRA Prop HQ stores limited billing status and identifiers required to grant access, handle cancellation and support. Resend or another configured provider may deliver account, welcome, payment, cancellation and support emails.
When you enable browser notifications, FRA Prop HQ stores the browser push endpoint and encryption keys needed to deliver rule alerts to that device. Notification permission is optional and can be disabled from Settings or the browser at any time.
7. Referral attribution and local storage
If you open a valid influencer link or apply a code, the browser can store that code and an expiry timestamp for up to 30 days. We may store the referral source, landing path, timestamps, conversion status and related commission. Local storage is also used for necessary preferences such as theme, onboarding state and session-related product settings. FRA Prop HQ does not use these items to serve third-party behavioural advertising.
8. Service providers and sharing
Providers can include Supabase for authentication, database and Edge Functions; Netlify for website hosting; Stripe for billing; Tradovate or NinjaTrader for authorised account data; Databento for historical candle data requested for an individual trade chart; OpenAI for optional Coach responses; Resend for transactional email; and the browser push service selected by your browser or operating system for optional notifications. Information is shared only as needed for those services, legal compliance, fraud prevention or a business transfer subject to appropriate safeguards.
9. International processing
Some providers may process information outside the UK. Where required, transfers rely on recognised safeguards used by the relevant provider, such as adequacy arrangements or contractual protections.
10. Retention
Product data is generally kept while the account remains active and for a limited period afterwards for backups, security, disputes and recovery. Billing, tax, anti-fraud and legal records may be retained longer where required. You may delete product data or request account deletion, subject to records we must keep.
11. Security
Controls include authentication, row-level database policies, server-side secrets, encrypted provider tokens, restricted administrative functions, webhook signature checks and operational logs. No online service can guarantee absolute security.
12. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability. You can also withdraw consent where processing relies on consent. Contact support from the email linked to the account. You may complain to the UK Information Commissioner’s Office.
13. Children
FRA Prop HQ is intended for adults and is not directed to anyone under 18.
14. Changes
Material changes will be dated on this page and communicated where appropriate.
Futures and forex trading involve substantial risk and are not suitable for every person. FRA Prop HQ is a journalling and analytics service, not a broker or investment adviser. It does not place trades or guarantee outcomes. Past or hypothetical performance is not a reliable indicator of future results.
Optional check in emails
If you choose to receive FRA Prop HQ check in emails, we may use your account email, display name and last activity time to send occasional product updates, Discord reminders and a personal check in after a period of inactivity. These emails are optional. You can turn them off in Settings or use the unsubscribe link in any check in email.