1. Who we are

Wash-Sale Guardian LLC makes Mastbound Trader, desktop software for futures traders. "We", "us" and "our" mean Wash-Sale Guardian LLC. This notice explains what information Mastbound Trader and our website handle, where it goes, and your choices.

2. Mastbound Trader runs on your computer

Mastbound Trader is installed on your own computer and talks to your own trading platform there. Its local web app listens only on your own computer (address 127.0.0.1); it is not reachable from the internet. The one exception: if you switch on webhook alerts (for example from TradingView), the Cloudflare or ngrok tunnel you set up lets alerts from the internet reach Mastbound Trader's alert receiver, which accepts only messages carrying your secret. We don't run your strategies on our servers, and we can't reach into your computer.

2.1 What Mastbound Trader stores on your computer (we can't access it)

• Settings: your strategies and rules, limits (daily loss, drawdown, contracts, flatten time), account names, firm presets, time settings.
• Trading records: the trade journal, signals and order history (kept in a local database on your computer), and the order files exchanged with NinjaTrader.
• Logs: app and engine logs. They include your computer's user name inside file paths, and your license ID.
• Secrets: the webhook alert secret, your Discord bot token, Telegram or Discord webhook details, and the Tradovate login (stored in macOS Keychain or Windows' protected storage where available). Mastbound Trader keeps these on your computer and removes them from diagnostics files.
• AI features: recordings you upload, their sampled frames, your notes, answers and drafts, and your Describe my strategy conversations (section 4.3 says how long).
• Your license key file. The key is signed data that contains your license ID, your name and email address, your plan, and, if the key is locked to particular computers, scrambled IDs of them.
• Your license's activation record: an install ID (a random number Mastbound Trader makes for itself), our license server's signed answers and the times of the last check-ins (section 3.2).
• Acceptance records: when, and on which version, you accepted the Terms and the Risk Disclosure.
• Diagnostics files you create, until you delete them or send them to us.

On Windows, Mastbound Trader's files live in %LOCALAPPDATA%\FuturesBot, in Documents\NinjaTrader 8\shared_orders, and inside the Ubuntu-24.04 WSL distribution that runs the engine (including its database and logs). Uninstalling Mastbound Trader removes the program; to delete the rest, email us and we'll walk you through it.

3. What reaches us, and why

3.1 When you buy (through Stripe)

Stripe processes payments for us. We receive your name, email address, billing country and postal code, the plan you bought, payment and refund status, and the card brand and last four digits. Stripe's own privacy policy applies to the data it collects: stripe.com/privacy. We use this to provide your subscription, send receipts and important notices, handle refunds and disputes, and meet tax and accounting duties.

3.2 Your license key and its activation

We make your license key ourselves after you pay. We keep a record of each key we issue: your license ID, name, email, plan and dates, with your customer record.

Activation and check-ins. When you enter a Pro, Operator or trial license key, Mastbound Trader activates it with our license server, which Wash-Sale Guardian LLC runs on Cloudflare, and then checks in about once a week in the background (Terms, section 10A). Each time, it sends:

• your license key: our server checks it and keeps only the license ID. The name and email address in the key are never stored or logged;
• a hashed ID of your computer: the computer ID Mastbound Trader shows is already a one-way hash of your operating system's machine ID, and our server stores only a keyed hash of it;
• an install ID (a random number Mastbound Trader makes for itself) and the app version;
• a new random number for each request, so that an answer can't be replayed, and, on a check-in, the ID of the server's last answer.

Nothing else: never your trades, Orders, positions, account names, settings, strategies, logins or files. Cloudflare's network sees your IP address to deliver each request, as it does for this website; our license server doesn't store or log it. The free plan needs no license key, and nothing is sent for it. In a version of Mastbound Trader where activation isn't switched on yet, nothing is sent for it either.

We use this to confirm your plan, hold your plan's number of computers, free a computer when you move, stop a revoked license, and notice a license used on more computers than its plan allows.

What our license server keeps, with your license ID only (never your name or email address):

• for each computer that holds a place on your license: the keyed hash of its ID, its install IDs, the app version, the first and the latest activation or check-in times and how many there were, and the ID of the last answer. When you choose Move to another computer, or we free a computer for you, its install IDs, app version, counts and the ID of the last answer are deleted at once; its keyed hash and the time of its last check-in or activation stay, as the next item says;
• for each computer that was turned down or moved off your license: the keyed hash of its ID, the time of its last check-in or activation and the time it was first turned down, so that removing the key and entering it again can't restart the 14 days it keeps working without a successful check-in. A computer is turned down when, for example, your license is already active on as many computers as your plan allows, or your license has ended or was cancelled. This is deleted when that computer activates or checks in successfully again;
• for your license: its plan, how many computers use it, the times of its first and latest requests, and flags for unusual use (for example one license on more computers than its plan allows);
• the computers seen with your license in the last 30 days, to count them against your plan;
• daily counts of activations, check-ins and refusals, and hourly counts that limit how often a license can call;
• if we ever offer trial licenses, which computers have used one;
• a short log line for each request: your license ID, the result, the number of computers and the time it took. Never your key, name, email address, computer ID, its hash, install ID or IP address;
• whether we revoked your license.

How long each is kept is in section 9. If our license server can't be reached, Mastbound Trader keeps working with your license for 14 days after the last successful check-in, and a license problem never stops Flatten & stop, your exits or a session that's already running (Terms, section 10A.5).

With AI included, your license key also goes with each AI request, so our AI service can check your plan and count your allowance (section 4). It also goes with each check of your allowance: Mastbound Trader asks our AI service how many units you have left only when you press Check my units in Settings › AI, and that request carries your license key and nothing else. Each AI reply also brings back your units.

3.3 Update check (only when you click it)

When you press Check for updates in Settings, Mastbound Trader downloads one small file from mastbound.washsaleguardian.com to see whether a new version exists. Our host sees your IP address and that a copy of Mastbound Trader asked; the version comparison happens on your computer. Nothing is downloaded or installed automatically, and there is no background check.

3.4 Support and diagnostics (only what you send)

If you email us or send a diagnostics file, we receive what you send. A diagnostics file contains: app and engine logs, your settings, your trade journal, the app version, your license ID, and your computer's user name inside file paths. Secrets (alert secret, bot tokens, logins) are removed before the file is created. Look inside it before sending if you wish; you choose whether to send it.

3.5 Setup calls and group sessions

If you book a setup call, the booking tool receives your name, email and chosen time. If you agree to recording, we keep the recording as a record of what was done and for quality. We don't record without your consent. In group install sessions, the other people on the call can see what you share on screen, so close anything private first.

3.6 Our members' Discord

If you join our private Discord server, we see your Discord name and what you post there. Discord's own terms and privacy policy apply.

3.7 Our website

This website is hosted by Cloudflare. To deliver and protect it, Cloudflare processes each request, including your IP address, the page and the time. We use Cloudflare Web Analytics, which counts page views without cookies and without following you across other sites. The website uses no advertising or tracking cookies, and it doesn't store anything in your browser.

4. AI features: From your recording and Describe my strategy

Two optional features use an AI model to turn your own material into draft rules for you to check: From your recording (frames sampled from a screen recording of your own trading) and Describe my strategy (a conversation in which you describe your rules). Uploading a recording or typing a message sends nothing by itself. A request is sent only after you consent on that feature's screen and press send. (Opening these screens sends nothing. Your units are asked for only when you press Check my units, with your license key: section 3.2.)

Both features use AI included (coming soon): each request goes to Mastbound Trader's AI service, which Wash-Sale Guardian LLC runs on Cloudflare, with your license key and your plan's monthly allowance. The service passes the request to Anthropic, which runs the AI model and processes the request for us as our service provider (a processor), and sends the reply back to your computer. AI included isn't switched on yet: until it is, From your recording and Describe my strategy can't draft rules.

4.1 What is sent

• From your recording: the sampled frames you reviewed (pictures, each with its file name and its time in the video), your note, your answers to the follow-up questions and, on a follow-up round, the previous draft. Audio is never sent.
• Describe my strategy: your messages, and the model's earlier replies in the same conversation.
• Both: the instructions that describe the rules format, with examples, which our service adds (they say nothing about you), and your license key, which your computer sends so the service can check your plan and count your allowance.

Never sent: your order files, account settings, trade journal or database, and your broker, NinjaTrader, Tradovate, Discord or Telegram logins and tokens. But anything visible in a frame, or written in your note, answers or messages, is sent. Look through the frames and what you wrote for private information before you send.

4.2 What we keep

• Usage counts for your license ID: the units, requests and tokens used each month, to count your allowance, and short-lived counters that enforce the limits (kept 2 days at most).
• Request records: for each request, our service's log line: its request ID (and the AI provider's), your license ID, the feature, the round, the result, the units, the number of tokens and how long it took. We use them to stop misuse and fix problems.
• A sealed copy of the reply text, for 15 minutes, so that if your computer sends the same request again it gets the same reply without being charged twice. It is encrypted with a key made from your computer's own request number, which the service doesn't keep, so only that retry can open it. Then it is deleted.
• A request count per network address, for 10 minutes, to limit abuse. It is stored under a keyed hash of your IP address (pseudonymous, not anonymous), never with your license ID, and deleted after those 10 minutes.

We never keep the frames, your note, answers or messages, and our service's records never hold your license key's text, your name or your email address. Deleted records can stay in Cloudflare's storage recovery history for up to 30 days; that history holds counts, IDs and the sealed reply copies, never readable content. Cloudflare processes each request, including your IP address, to deliver and protect it, as it does for this website.

Anthropic uses what you send only to produce the reply for us, and keeps it only as long as its commercial terms allow (for example, for a limited time to check for misuse). It also keeps a short-lived cache of the instructions and of a recording's frames, for about 5 minutes after their last use, which makes a follow-up round quicker. Each request carries a code made from your license ID, never your name or email, so that Anthropic's misuse checks can tell customers apart.

4.3 On your computer

From your recording keeps the uploaded video, the sampled frames, your notes and the drafts on your computer, and Describe my strategy keeps the conversation there. Recordings and their drafts are deleted after seven days, or when you delete them yourself after processing. A conversation is deleted after seven days, or when you delete it yourself. Mastbound Trader checks for old ones when it starts and every hour while it runs. Rules you save to your library stay until you delete them.

5. Services you connect (their policies, not ours)

When you use these features, your information goes directly from your computer to that company, not through us, except the official Discord bot (section 5.2):

• NinjaTrader, Tradovate, your broker and your prop firm (your orders and account data);
• Discord and Telegram (alerts and phone commands; they may include account status, positions and P&L);
• TradingView or another alert service (alerts you create), and Cloudflare or ngrok (the tunnel that carries webhook alerts to your computer; the tunnel company can see the alert, including your secret);
• GitHub (the Cloudflare tunnel program is downloaded from there during setup);
• your AI chatbot, if you use one to write rules.

Each company's own terms and privacy policy apply.

5.1 Approve on phone

Approve on phone sends setup details and Take or Skip buttons to your configured private Telegram chat or Discord channel. The local decision journal records questions, answers, times and delivery outcomes. Anyone with access to the linked phone account may see these details and answer a current question. Button access is restricted to the linked owner and message.

5.2 The official Discord bot (when switched on)

Instead of your own Discord bot, you will be able to connect our official Discord bot (Connect Discord in Mastbound Trader) once we switch it on. In this version of Mastbound Trader it isn't switched on, and nothing is sent for it. When you use it, your messages, button presses and commands with the bot pass through our Discord relay, which Wash-Sale Guardian LLC runs on Cloudflare, because only the relay holds the bot's login: what your computer asks the bot to post (setup questions with their Take and Skip buttons, results and status replies, which may include account status, positions and P&L), and what you press or type in your private conversation with the bot (Discord's signed record of each press or command, which includes your Discord user ID and name and the message you pressed on). Cloudflare's network sees your IP address to deliver each request.

What our Discord relay keeps:

• your Discord user ID, the ID of your private conversation with the bot, the random ID your computer made for the link and a one-way hash of its link password: until 30 days after the link was last used, and deleted at once when you press Disconnect;
• while you connect: a one-time code that ties Discord's answer to your computer and the time you started, until you confirm the link (20 minutes at most), and your Discord display name, which Mastbound Trader shows you to confirm, from Discord's answer until you confirm (10 minutes at most);
• which of the bot's messages belong to your computer (message IDs), for 24 hours;
• each button press or command, with the details Discord sends with it (your Discord user ID and name, the message you pressed on), until your computer collects it (30 seconds at most), and Discord's reply token for it, for 14 minutes;
• if another computer asks to take over your link, a record of the question we post in your private conversation, until you answer it (10 minutes at most);
• request counts for your link, for 2 minutes, and a keyed hash of your IP address, for up to 2 hours, to limit abuse.

Beyond what a message shows, the relay never receives your broker, NinjaTrader or Tradovate logins, your trade journal, your rules files or other files. Deleted records can stay in Cloudflare's storage recovery history for up to 30 days. Discord's own terms and privacy policy apply to what you do in Discord.

6. How we use information

Only to: provide and license Mastbound Trader (including activating and checking your license, section 3.2); provide the AI features and count their allowance; process payments, refunds and disputes; send service, safety and legal notices; answer support; detect license sharing and abuse; keep records of what you accepted; fix bugs using diagnostics you send; and meet legal obligations. We send marketing emails only if you opt in, and every marketing email has an unsubscribe link.

7. What we never do

• We don't sell your personal information, and we don't share it for cross-context behavioral advertising.
• We never ask for, receive or store your broker, NinjaTrader, Tradovate or prop-firm passwords.
• We don't use your trade journal or strategies to trade, or to build or sell strategies.
• We don't keep the frames, notes, answers or messages you send to the AI features, and we don't use them to train AI models.
• We don't share your information with prop firms or brokers, unless the law requires it or you ask us to.

8. Who we share with

• Service providers that help us run the business, under their terms limiting their use of the data: Stripe (payments), Cloudflare (website hosting, downloads, email forwarding, our AI service, our license server and, once it is switched on, the official Discord bot's relay), Anthropic (the AI model behind AI included), Google (our email inbox), [BOOKING TOOL] (setup-call bookings), and Discord (the members' server and, once it is switched on, the official Discord bot).
• Legal reasons: to comply with law, a court order or a lawful government request; to protect our rights, including enforcing our Terms and license; or to prevent fraud.
• Business transfer: if our business is sold or merged, information may transfer to the new owner, who must honor this notice.
• With your consent.

9. How long we keep it

10. Security

We use reasonable safeguards for what we hold: encrypted connections, access limited to people who need it, and two-factor authentication on our accounts. No method is perfectly secure. If a breach affects your personal information, we'll notify you as the law requires.

11. Your choices and rights

• See, correct, export or delete your information: email mastbound@washsaleguardian.com. We'll verify it's you (for example from the email on your account) and answer within 30 days. We may keep what the law requires us to keep (for example payment records).
• Local data: it's on your computer; you control it fully.
• Marketing emails: unsubscribe at any time.
• State laws. Some privacy laws (for example California's) give you specific rights. Whether or not a law applies to us, we will honor the requests above.

12. Children

Mastbound Trader is only for adults (18 or older). We don't knowingly collect information from anyone under 18.

13. Where data is processed

We are based in the United States. Information that reaches us is processed in the United States. Our AI service and our license server run on Cloudflare's network, and Cloudflare (or, for an AI request, Anthropic) may handle a request outside the United States. At launch we sell only in the United States.

14. "Do Not Track"

Our website doesn't respond to browser "Do Not Track" signals, because it doesn't track you across other sites.

15. Changes

We'll post any change here with a new date. For a material change, we'll tell you by email or in the app before it takes effect.

16. Contact

Wash-Sale Guardian LLC · [ADDRESS] · mastbound@washsaleguardian.com