PipFolio Legal
Privacy Policy
Last updated: August 31, 2026
This draft explains how PipFolio handles data for a trading journal and performance intelligence workspace. It should be reviewed by the product owner and legal counsel before public launch.
Information We Process
PipFolio processes account details such as your email address, display name, preferences, and authentication state through Supabase Auth.
The product stores trading data you enter or import, including trading accounts, journal entries, executions, trade screenshots, import metadata, mapping presets, daily reviews, goals, and prop challenge records.
Private Files
Trade screenshots and import files are stored in private Supabase Storage buckets under paths scoped to your authenticated user ID.
PipFolio does not intentionally publish public URLs for private trade images or import files.
Notion Integration
If you connect Notion, PipFolio stores local encrypted Notion tokens and configuration records so it can create or update one-way journal copies in your Notion workspace.
Disconnecting Notion or deleting your PipFolio account removes PipFolio's local connection and sync records. It does not delete pages, databases, or other content already present inside your Notion workspace.
Data Export and Deletion
Authenticated users can export a JSON copy of account-owned PipFolio records from Settings or the export endpoint.
Authenticated users can request account deletion from Settings. PipFolio deletes local account data, local integration records, and private Storage objects before deleting the authentication user, subject to safeguards such as preventing deletion of the last owner account.
Security
PipFolio uses Supabase row-level security so tenant-owned records are scoped to the authenticated user.
Server-side administrative operations use service-role credentials only in server-only code paths and never require a browser-supplied user ID.