Privacy Policy

1. Who We Are

LimitPact is a trading discipline and risk-protection software product for futures traders.

For privacy-related questions or requests, contact:

2. Scope of This Policy

This Privacy Policy applies to:

• the LimitPact website;
• the LimitPact desktop application;
• the LimitPact private beta;
• contact and beta-registration forms;
• supported trading-account integrations;
• communications between you and LimitPact; and
• related LimitPact services.

It does not apply to third-party websites, brokers, trading platforms, or services that maintain their own privacy policies.

3. Information We Collect

3.1 Information You Provide Directly

When you join the private beta, contact us, or otherwise communicate with LimitPact, we may collect:

• your name;
• your email address;
• your trading platform;
• the content of messages you send to us; and
• other information you voluntarily provide.

You are not required to provide information through our forms, but we may be unable to respond to your request or provide beta access without the information requested.

3.2 Trading Account Information

If and when supported account integrations become available and you choose to connect an account, LimitPact may process limited account information required to provide its monitoring and protection features.

Depending on the integration, this may include:

• trading-account identifiers;
• account status;
• account activity;
• positions;
• trade activity;
• profit and loss information;
• session-related account information; and
• other read-only information required to evaluate the protection rules you configure.

LimitPact is designed to request only the account information reasonably necessary for its monitoring and protection features.

3.3 OAuth Authorization Information

Where an integration uses OAuth, LimitPact may process authorization tokens or similar credentials required to maintain the authorized connection.

LimitPact does not collect or store your Tradovate username or password when authentication is performed through the official OAuth authorization flow.

OAuth tokens are not your trading-platform password but should still be treated as sensitive authorization credentials.

3.4 Technical and Security Information

When you access the website or Services, certain technical information may be processed automatically by LimitPact or its infrastructure providers, such as:

• IP address;
• browser type;
• operating system;
• device information;
• timestamps;
• requested pages or endpoints;
• application errors;
• security events; and
• server or diagnostic logs.

We use this information only where reasonably necessary to operate, secure, troubleshoot, and improve the Services.

4. How We Use Information

We may use personal information to:

• operate and provide the Services;
• maintain your private-beta registration;
• respond to questions and contact requests;
• communicate with you about beta availability or LimitPact;
• connect and maintain authorized trading-account integrations;
• monitor account information against protection rules you configure;
• provide application functionality;
• troubleshoot technical problems;
• detect abuse, fraud, or security threats;
• maintain the security and reliability of the Services;
• comply with applicable legal obligations; and
• establish, exercise, or defend legal claims where necessary.

We do not use trading-account information to provide personalized investment recommendations or trading signals.

5. Legal Bases for Processing

Where laws such as the GDPR or UK GDPR apply, our legal bases may include:

Consent

We may rely on your consent when you voluntarily:

• join the private-beta list;
• submit information for a specific optional purpose; or
• authorize certain optional communications.

Where processing is based on consent, you may withdraw that consent at any time.

Performance of Our Agreement With You

We may process information where necessary to provide Services you request, including supported account integrations and LimitPact application functionality.

Legitimate Interests

We may process information where reasonably necessary for legitimate interests such as:

• operating LimitPact;
• responding to inquiries;
• maintaining and improving reliability;
• protecting users and LimitPact from abuse;
• securing our systems; and
• troubleshooting technical problems,

provided those interests are not overridden by applicable privacy rights.

Legal Obligations

We may process or disclose information where necessary to comply with applicable law, regulation, court order, or other legally binding requirement.

6. Tradovate and Other Third-Party Integrations

LimitPact may integrate with third-party trading platforms and services.

The planned Tradovate integration is designed to use an official OAuth authorization flow and read-only account access.

LimitPact does not require Tradovate API permission to:

• place orders;
• modify orders; or
• cancel orders.

Authentication performed by Tradovate is governed by Tradovate's own terms and privacy practices.

LimitPact is an independent software product and is not affiliated with or endorsed by Tradovate or NinjaTrader unless explicitly stated otherwise.

7. How We Share Information

We do not sell personal information.

We do not share personal information for cross-context behavioral advertising or similar advertising purposes.

We may disclose information only where reasonably necessary to:

Service Providers

We may use hosting, infrastructure, email, security, database, or technical service providers that process information on our behalf.

Such providers receive information only as reasonably necessary to perform the relevant service.

Third-Party Integrations

Information may be exchanged with a trading platform or other service when necessary to establish and maintain an integration that you authorize.

Legal and Safety Requirements

We may disclose information where we reasonably believe disclosure is required to:

• comply with applicable law or legal process;
• protect the rights, safety, or security of LimitPact or others;
• investigate abuse or security incidents; or
• establish, exercise, or defend legal claims.

Business Changes

If LimitPact or substantially all of its operations are transferred, reorganized, or acquired in the future, relevant information may be transferred as part of that transaction, subject to applicable law.

8. Cookies and Similar Technologies

At this stage, LimitPact does not use advertising cookies, behavioral advertising trackers, or advertising pixels.

We also do not currently use third-party analytics for behavioral tracking.

The website may use strictly necessary storage or similar technologies where required for:

• core functionality;
• security;
• session operation; or
• user-interface preferences.

If our use of cookies or analytics changes materially, we will update this Privacy Policy and provide any consent mechanism required by applicable law.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy or as required by applicable law.

In general:

• private-beta and contact information may be retained for up to 24 months after the last meaningful interaction, unless an ongoing relationship requires longer retention;
• OAuth authorization information is retained only while reasonably necessary to maintain the authorized integration and is removed or invalidated when no longer required where technically possible;
• account information is retained only to the extent required for LimitPact functionality, security, troubleshooting, or legally required records;
• technical and security logs are retained for periods reasonably necessary for security, reliability, and troubleshooting.

We may retain limited information for longer where necessary to comply with legal obligations, resolve disputes, prevent abuse, or enforce agreements.

10. International Data Transfers

LimitPact is operated from Israel and may use service providers located in Israel or other countries.

This means personal information may be processed in a country other than the country where you live.

Where applicable law requires safeguards for an international transfer of personal information, we will use legally recognized safeguards or another lawful transfer mechanism as required.

11. Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Our security approach includes limiting access to information to what is reasonably necessary for the operation of the Services.

However, no internet service, computer system, or storage system can be guaranteed to be completely secure.

You are responsible for maintaining the security of your own devices, trading-platform accounts, email accounts, and credentials.

12. Your Privacy Rights

Depending on where you live and which laws apply, you may have rights regarding your personal information, including the right to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request deletion of information;
• request restriction of certain processing;
• object to certain processing;
• request portability of certain information;
• withdraw consent where processing is based on consent; and
• lodge a complaint with an applicable data-protection authority.

These rights are subject to applicable legal exceptions and limitations.

To exercise a privacy right, contact:

[email protected]

We may request information reasonably necessary to verify your identity before completing certain requests.

13. Automated Decision-Making

LimitPact's protection rules may automatically evaluate trading-account information against thresholds that you configure.

These rules are intended to control local LimitPact functionality and do not make investment decisions on your behalf.

LimitPact does not use automated profiling to determine your creditworthiness, employment, insurance eligibility, or similar legally significant characteristics.

14. No Sale of Personal Information

LimitPact does not sell personal information.

LimitPact does not currently monetize personal information through targeted advertising or data-broker relationships.

If this practice ever changes, this Privacy Policy will be updated before such use begins, and applicable rights and consent requirements will be respected.

15. Age Requirement

LimitPact is intended only for individuals who are 18 years of age or older.

The Services are not directed to children or minors.

If we learn that personal information was collected from a person who is not eligible to use LimitPact, we may delete the information and terminate access where appropriate.

If you believe a minor has provided personal information to LimitPact, contact us at:

[email protected]

16. Third-Party Websites and Services

The Services may contain links to or integrations with third-party websites or services.

We are not responsible for the privacy, security, availability, or practices of third-party services.

You should review the privacy policies of any third party you choose to use.

17. Changes to This Privacy Policy

We may update this Privacy Policy as LimitPact develops, new features are introduced, legal requirements change, or our data practices change.

When we make material changes, we will update the Last Updated date and provide additional notice where required by applicable law.

Your continued use of the Services after an updated Policy becomes effective is subject to applicable law.

18. Contact Us

Questions, privacy requests, or concerns may be sent to: