Privacy

This explains what Hestavant stores, why, and what we never collect.

What we never have

• Your broker, prop-firm or platform passwords. You sign in to them inside your own platform; they never reach us.
• Access to place trades. Orders are placed only by the platform on your computer, from your own connection.

What we store

• Your account: name, email address, a one-way hash of your password, and your timezone.
• Your machines: the name each computer gives itself, when it last connected, and the version of Hestavant Desktop. Each machine signs in with a token of which we keep only a one-way hash.
• Trading accounts your platform reports: account name, connection name, whether it is a simulation account, net liquidation, realised P&L and open positions, plus any limits you enter.
• Signals and routes: the settings you create, each signal's webhook address and token, and the alerts it receives.
• Trades and activity: each automated trade (instrument, side, size, prices, P&L, times) and a log of signals, deliveries and results - this is your journal.
• Technical logs: our hosting provider records IP addresses and request details for security and reliability.

Why

Only to run the service: deliver your signals to your machines, show your dashboard and journal, enforce the protections you set, and keep the service secure. We do not sell your data or use it for advertising.

Where it lives

The website runs on Vercel; the database is Supabase (Postgres) in London, United Kingdom. Data is encrypted in transit.

Your choices

• Remove a machine at any time from the Desktop page - its token stops working immediately.
• Export your journal as CSV from the Journal page.
• To delete your account and all its data, email support@hestavant.com.