Privacy Policy & Terms of Service

We deliberately keep this to a minimum. We collect only:

• Your email address — used to create your account and sign you in. If you sign in with Google, we receive the email address and basic profile associated with that Google account. That is the only personal detail we require.
• The IBKR statement data you import— trades, positions, cash transactions, and the P&L derived from them. This is financial trade data only. We never receive or store your IBKR username or password.
• Flex Web Service credentials (optional) — if you choose to connect automatic sync, your IBKR Flex token and Query ID. These are read-only and cannot place trades, transfer funds, or access your IBKR login.
• Your preferences and journaling content — the notes, tags, column layouts, and settings you create inside the app.
• Minimal technical data — standard server logs and session information needed to operate the service securely.

We do not collect your name, postal address, phone number, bank details, card numbers, or your IBKR account credentials.

Your data is used for one purpose: to provide your trade journal and analytics dashboard. That means parsing the statements you import, computing performance and P&L, rendering your pages, and keeping you signed in. We do not sell your data, share it with advertisers, or use it to train models or for any purpose unrelated to running your dashboard.

Only you.Your data is isolated at the database level using row-level security: every trade, position, and note is locked to your account, so one user can never read another user's data — and neither do we in normal operation. We do not have partners with whom your trading data is shared.

To run the service we rely on a small number of infrastructure providers (sub-processors):

• Supabase — our database, authentication, and hosting backend, where your data is stored.
• Amazon Web Services (AWS) — cloud hosting and scheduled background jobs that run the application and keep your data in sync.
• Market-data providers — when you view a symbol, we look up public market data (prices, earnings dates, analyst figures). These lookups send only the ticker symbol, never your identity, holdings, or trade history.

These providers process data on our behalf under their own security and privacy terms and are not permitted to use your data for their own purposes.

• Encrypted in transit (HTTPS) and at rest in our managed database.
• Row-level security policies enforce that only your authenticated account can read or write your records.
• Any IBKR Flex connection uses a read-only token that cannot place orders or move money.
• Access to production infrastructure is restricted and credentials are never committed to code.

No system is perfectly secure, but we design PaprBoard to hold as little as possible and to keep what it does hold tightly scoped to you.

We keep your data for as long as your account is active. You can ask us at any time to export your data or to delete your account and all associated trade data — once deleted it cannot be recovered. To exercise any of these rights, or to ask what we hold about you, email support@paprboard.com.

We use essential cookies required to keep you signed in and to maintain your session. Some preferences (such as table layouts) are stored locally in your browser. We do not use advertising cookies, and we do not sell or share your data with advertisers.

We use Google Analytics to understand how people find and move around PaprBoard, on both our public pages and inside the dashboard. It sets a first-party cookie and reports which pages are viewed, approximate location, and whether the visitor is signed in.

What it never receives is anything about your positions. Analytics sees that you opened the ticker page; it does not see which ticker, because the query string is removed before the page view is sent. It does not receive your trades, holdings, balances, notes, account numbers, name, or email address, and account ids are replaced with a placeholder. You can opt out entirely with Google’s browser add-on.

PaprBoard imports and analyses Interactive Brokers statement data to produce a trading journal and analytics dashboard. PaprBoard is offered with a 30-day free trial, after which continued use is $5/month. We may change features or pricing over time; material changes will be communicated in advance where reasonably possible.

PaprBoard is an analytics and record-keeping tool. Nothing in the app constitutes financial, investment, tax, or legal advice, and figures are provided for informational purposes only. You are solely responsible for your trading decisions. Market data may be delayed or contain inaccuracies; always verify against your official IBKR statements.

PaprBoard is independent and is not affiliated with, endorsed by, or sponsored by Interactive Brokers LLC. “Interactive Brokers” and “IBKR” are trademarks of their respective owners.

You are responsible for keeping your account credentials secure and for the accuracy of the statements you import. You agree to use PaprBoard only for lawful purposes and only with data you are entitled to use. Do not attempt to access other users' data, disrupt the service, or reverse-engineer it.

PaprBoard is provided “as is” and “as available”, without warranties of any kind. To the maximum extent permitted by law, PaprBoard and its operators are not liable for any trading losses, lost profits, or indirect or consequential damages arising from your use of, or inability to use, the service.

We may update these terms from time to time, and continued use after a change constitutes acceptance. PaprBoard is available globally and does not impose a specific governing-law jurisdiction; the mandatory consumer-protection and data-protection laws of your own country of residence continue to apply to you.

Questions about this policy or your data? Email support@paprboard.com.