Privacy Policy

Proplysis ("Proplysis", "we", "us", or "our") is the trading journal and analytics platform at proplysis.com, operated from Türkiye. Proplysis is the data controller responsible for your personal information and can be reached at info@proplysis.com. This Privacy Policy explains what information we collect, how and why we use it, who we share it with, the legal bases we rely on, and the choices and rights you have. We handle personal data in line with Turkey’s Personal Data Protection Law (KVKK, Law No. 6698) and, where they apply, other data-protection laws.

Proplysis is operated from Türkiye and is intended for users outside the European Union and the United Kingdom. It is not directed to, and we do not knowingly market to or onboard, residents of the EU or UK. If you nonetheless use Proplysis from those regions, we still honor the data rights described in this policy.

Account information. When you create an account we collect your name, email address, and a password (or, if you sign in with Google, the basic profile information Google shares — your name, email, and avatar). We never receive or store your Google password.

Purchase verification. To unlock the dashboard you forward your prop-firm order-confirmation email to our verification address. We process the contents of that email to confirm your purchase, including the firm, account size, and price you paid.

Connected trading-account data. If you link a trading account (for example Tradovate, cTrader, TradeLocker, Match-Trader, DXtrade, or Rithmic), we access — on a read-only basis — your account balance, equity, open positions, and trade history through the platform's API. We never have the ability to place, modify, or close trades on your behalf. Some platforms (such as DXtrade and Rithmic) do not issue a renewable access token, so to keep your data in sync we store the password you provide for that platform encrypted at rest, use it only to re-establish the read-only connection, and delete it when you disconnect the account.

Support and messaging. If you contact us — by email, through our contact form, or via our Telegram support bot — we collect the information you provide, such as your name, email address, and the contents of your message. If you reach us or link with us through Telegram, we also collect your Telegram username and chat ID so we can reply to you and, according to your notification settings, send you alerts.

Usage information. We collect basic technical and usage data such as your IP address, browser type, pages viewed, and interactions, to operate and improve the platform and to keep it secure.

We use your information to: create and secure your account; verify your prop-firm purchase and grant dashboard access; sync, compute, and display your trading analytics and rule-compliance metrics; send you transactional messages (such as verification, password reset, and account alerts); respond to your support requests; operate, maintain, and improve the platform; and comply with our legal obligations.

We may use a third-party AI provider, located in the United States, to power features such as our blow-prevention alert. Where we do, only the minimum data required for that feature is processed, it is not used to train third-party models, and these alerts are informational only — they are not automated decisions that produce legal or similarly significant effects.

Under the KVKK and, where it applies, the GDPR, we process your information only where we have a legal basis to do so:

Performance of our contract with you — to create and secure your account, verify your purchase and grant dashboard access, and sync, compute, and display your trading analytics and rule-compliance metrics. This is the core service you sign up for, and we cannot provide it without this data.

Our legitimate interests — to keep the platform secure, prevent fraud and abuse, respond to support requests, and operate and improve our services, balanced against your rights and freedoms.

Your consent — for optional processing, including certain cross-border data transfers (see “International data transfers” below) and any future marketing. Where we rely on consent, you can withdraw it at any time.

Legal obligations — to meet our accounting, tax, and other legal requirements.

We do not sell your personal information. We share it only with service providers who process it on our behalf and only as needed to run the platform, including: Supabase (authentication and database), Vercel (hosting), Mailgun (sending transactional email), Telegram (support messaging and, if you opt in, notifications), and the trading-platform and AI providers described above. Each processes your data under our instructions and is bound to protect it and use it only for the services they provide to us.

When you purchase a challenge through one of our affiliate links, the prop firm processes your purchase directly under its own privacy policy; we receive a commission record but not your payment-card details. We may also disclose information where required by law or to protect the rights, safety, and security of Proplysis and its users.

Proplysis is operated from Türkiye and relies on service providers located in the United States and elsewhere, so your personal information may be processed outside your country of residence. Where the law requires a safeguard for these transfers, we rely on Standard Contractual Clauses (or the equivalent standard contract recognized under the KVKK) and, where appropriate, on your explicit consent. You can request a copy of the safeguards we use by emailing us at the address below.

We use cookies and browser local storage that are strictly necessary to operate the platform — primarily to keep you signed in and to secure the authentication flow. We do not use third-party advertising trackers.

We keep your information only for as long as we need it. We retain your account information for as long as your account is active. If you disconnect a trading account, we soft-hide it and delete the platform credentials we stored for it; your persisted trades and equity history are retained so your records remain intact if you reconnect, unless you ask us to delete them. If you delete your account, we delete or anonymize your personal information, except where we are required to keep certain records (for example, purchase and commission records) for legal, tax, or accounting purposes, which we retain only for the period those laws require.

We protect your information with industry-standard measures including encryption in transit, encryption at rest for any stored trading-platform credentials, scoped database access controls, and read-only trading-platform connections. No method of transmission or storage is completely secure, but we work to safeguard your data and to promptly address any vulnerability we become aware of. If a data breach affects your personal information, we will notify you and the relevant supervisory authority without undue delay, as required by law.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and — where we rely on consent — to withdraw that consent at any time. You can manage much of your information directly in your account settings, or contact us using the details below; we will respond within 30 days. If you are in the United States, you may have additional rights under your state's privacy law, including the right to opt out of the sale or sharing of personal information, which we do not do.

If you believe we have mishandled your data, you have the right to lodge a complaint with a supervisory authority — in Türkiye, the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) — or with your local data-protection authority.

Proplysis is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or how we handle your information, or you wish to exercise your rights, email us at info@proplysis.com.