Privacy notice

Locuit is a screening and journalling tool used by signed-in readers. This notice describes what it stores about you, what leaves the service, and how to get rid of it. It does not cover the public marketing pages, which store nothing about you.

Your account. Your email address and a sign-in identity, so you can get back in.

What you told us about yourself. Optionally: an account size, a risk percent, your options approval level, and whether you have a margin account. Every one of these is optional, and blank is a real answer — Locuit degrades rather than inventing a number.

Your trading plan. If you give one: the full text, the file name if you uploaded a file, and the key points read out of it. Replacing a plan keeps the previous version so that an answer Locuit already gave stays attributable to the text it actually read; deleting removes every version.

What you did here. Your watchlist, the positions you logged, and the windows you chose to hide along with the reason you gave. Dismissals are kept after they lapse, because a window you have passed on three cycles running is a fact worth having.

Locuit does not use tracking cookies, does not run third-party analytics, and does not sell or share your data with advertisers.

A trading plan is a document you write, and Locuit cannot see what is in it before you upload it. Do not put account numbers, passwords, API keys, or identity documents in it. If you already have, delete the plan from settings and upload a version without them.

Anthropic. When you ask Locuit a question, the question is sent to Anthropic's API along with the board data, your open positions, your watchlist, the windows you have hidden, and — if you have given one — your trading plan and its key points. Your plan is also sent once when you first save it, to read the key points out of it. Your email address and account identity are not sent.

Supabase. Everything described in section 2 is stored in a Supabase Postgres database, with row-level security scoping every row to the account that owns it.

Stripe. If you subscribe, payment runs through Stripe: your card details go to Stripe directly and never touch Locuit's servers. Locuit stores only your subscription's status, plan and Stripe identifiers, so it knows what you are entitled to. Stripe also handles receipts and, where it applies, sales tax.

Market data. Price history is fetched from a market data provider on a schedule. Those requests are about symbols, not about you, and carry nothing that identifies any reader.

Your account data, plan, watchlist, positions and dismissals are kept until you delete them or close your account. There is no automatic expiry — a journal that quietly erased last year's trades would be worse than useless.

Every journal entry is private by default and stays that way. You can choose, entry by entry, to share a closed trade on the public snapshot page. What is published is the entry as a story: the symbol, the direction, the dates, your note, and the percent move. Prices, position sizes, your name, and anything that identifies you are never published — the page is built so it cannot show them. Unsharing removes the entry from the page immediately, though a page someone already saved is beyond anyone's recall. Deleting your account removes shared entries with everything else.

Locuit emails you only if you turn alerts on in settings, and then only one kind of email: a note that a watchlist symbol's window opened, sent the day it opens and never twice for the same window. A record of what was sent to you is kept so it cannot be sent again. Turning alerts off stops everything immediately, and deleting your details or your account turns them off with it. Your address is shared with the email delivery provider (Resend) for the sole purpose of sending these.

From settings you can delete your trading plan on its own, or delete your plan and everything you told Locuit about yourself together. Both are real deletes, not flags, and both remove every stored version.

Your journal is deliberately not included in that control, because it is a record of trades you made rather than details you told us, and a form for tidying details should not quietly destroy it. Deleting the journal takes the bigger act: settings also lets you delete the account itself, which removes everything — journal, reviews, watchlist, plan versions, sizing, and Ask usage records — immediately and without a grace period. That control asks you to type the word because there is no undo.

Answers Locuit already gave you in a conversation are not retrieved or rewritten when you delete the plan behind them.

Depending on where you live you may have rights to access, correct, export, or erase the data held about you, and to object to or restrict its processing. Settings covers all three directly: correction for everything it shows, a full JSON export of everything Locuit holds about you, and erasure up to and including the account itself. For anything else, get in touch and it will be handled.

Data is stored encrypted at rest by the database provider and travels over TLS. Access is scoped per account at the database level rather than only in the application, so a bug in a page cannot return another reader's rows. No system is perfectly secure, and nothing here is a guarantee against every failure.

If this notice changes in a way that materially affects what happens to your data, you will be asked to read the new version rather than being treated as having agreed to text you never saw.