Legal & policies

PropSyncer by TMR — TheMarketRevelation

This policy explains what personal data TheMarketRevelation ("we", "us") collects when you use PropSyncer (the "Software") and our website themarketrevelation.com, why, and what you can do about it. We are the controller of the data described here.

The short version

• Your broker and platform passwords, your trading accounts, positions, orders and journal stay on your computer. They are never sent to us.
• Our servers hold your account, your subscription, and a hashed fingerprint of each computer you activate — enough to run your licence, and no more.
• The Software contains no analytics, advertising or tracking, and we do not sell personal data.

What we collect on our servers

Account. Your email address, name if you give one, and a hash of your password (never the password itself). If you choose Discord sign-in: your Discord user ID, username and avatar.

Subscription. Your plan, subscription status and renewal date, number of seats, and the customer and subscription identifiers our payment provider, Razorpay, gives us. Card and bank details are entered with Razorpay and never reach us.

Sessions. A one-way hash of each sign-in token, when it was issued and expires, the name, operating system (for example "Windows 11 Pro") and PropSyncer version of the computer that signed in, and the IP address it signed in or last renewed from.

Sign-in history. When each sign-in happened, whether it used a password or Discord, and the computer name, operating system, PropSyncer version and IP address it came from. We use it to support you, and to spot an account being used on machines it should not be.

Licensed devices. For each computer you activate: a device fingerprint, made of the machine ID, motherboard serial, disk serial and network adapter address, each turned into a one-way SHA-256 hash on your computer before it is sent; the computer's name; the operating system and its version; the app version; the IP address of its most recent check-in; and when the device last checked in. This is checked about every five minutes while the Software runs.

Security and abuse prevention. We compare device fingerprints and IP addresses across accounts to detect one person using several accounts, or a licence being shared. A computer found doing so may be blocked from the Software on every account; we keep its fingerprint, the account it was blocked from and the reason for as long as the block lasts. An IP address alone is never used to block anyone, because many people can share one. We also keep the IP address of failed sign-in attempts briefly, to limit password guessing, and records of administrative changes to your account.

What stays on your computer

These are stored only on your computer and are not sent to us:

• credentials for NinjaTrader, brokers, prop firms, cTrader, TopstepX and MetaTrader 5 — encrypted with Windows-protected storage, except MetaTrader 5 terminal passwords, which the MetaTrader software requires in its own configuration file;
• your trading accounts, balances, positions, orders, copy history and settings;
• journal notes and any screenshots you attach;
• application logs;
• the key the Software uses to talk to its NinjaTrader add-on.

When you connect a broker or platform, the Software sends your credentials and orders directly to that broker or platform, not through us.

Why we use it

• To provide the service you pay for: sign-in, subscriptions, and licensing each device you activate.
• To prevent fraud and abuse, such as shared accounts or licences used on more devices than paid for.
• To bill you, through Razorpay.
• To meet legal, tax and accounting obligations.
• To contact you about your account, your subscription and important changes to the Software.

Who we share it with

• Razorpay, to process payments.
• Discord, only if you choose to sign in with Discord.
• Cloudflare and our hosting provider, which deliver and protect our website and see the traffic that passes through it.
• Authorities, where the law requires it.

We do not sell, rent or trade personal data, and we do not share it for advertising.

How long we keep it

Account and subscription data is kept while your account is open and for up to 12 months after it closes, unless the law requires us to keep records longer (for example tax and accounting records). Device records are kept until the seat is released or the account is deleted. Sign-in history, including its IP addresses, is kept while your account is open; the IP address on a session is deleted with the session. Records of a blocked computer are kept until the block is lifted. Records of failed sign-in attempts are kept for about a day.

Security

Passwords are stored only as hashes. Sign-in tokens are stored only as hashes. Licences are digitally signed. Device identifiers leave your computer only as one-way hashes. Our database is not reachable from the internet directly. No system is perfectly secure, and we cannot guarantee it.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, and to object to or restrict how we use it. To exercise any of these, open a support ticket in our Discord server (discord.gg/akz3bTgnx7, also linked from themarketrevelation.com) and tell us the email address on your account; we may ask you to confirm it is yours. Deleting your account also releases its devices and ends the subscription. You may also complain to your local data protection authority.

Where data is processed

Our servers and providers may process data in countries other than yours. Where required, we use appropriate safeguards for those transfers.

Children

The Software is for adults who trade. It is not intended for anyone under 18, and we do not knowingly collect their data.

Changes

We may update this policy. The Software shows the new version and asks you to accept it before you continue.

Contact

TheMarketRevelation. Open a support ticket in our Discord server (discord.gg/akz3bTgnx7, also linked from themarketrevelation.com).