1. Scope and controller
This Policy applies to the Lotra desktop application for Windows and macOS, Lotra Cloud, Discord sign-in and community features operated by Lotra, Whop subscription records, support communications, and this website. Lotra is responsible for personal information it receives for these services. Connected brokerages, Discord, Whop, market-data providers, and other third-party services independently control information they collect or receive under their own policies.
Review each third-party provider’s privacy notice before connecting an account or purchasing access.
2. Information processed by Lotra Cloud
Depending on the features you use, Lotra Cloud may process:
- Discord account information, including user ID, username, display name, avatar, server membership, and role or access eligibility;
- authorized device and session identifiers, optional device label, application version, and policy-acceptance records (including policy version, acceptance timestamp, and age confirmation);
- sign-in, request, and security logs, such as timestamps, IP address, client metadata, rate-limit status, and error or abuse records;
- buy and sell signal information, such as ticker symbol, order side, quantity or position scope, eligible brokers, timing, status, and signal reference pricing;
- signal delivery and completion status, recording whether a signal was received and high-level outcome counts without storing your brokerage account numbers, balances, or individual fill prices;
- redacted diagnostic events sent after you accept this Policy, limited to high-level signal and broker status information (such as broker category, ticker, timestamps, status codes, and order-outcome counts) without account numbers, login credentials, balances, or raw broker responses;
- software version and update-check information needed to verify compatibility and deliver application updates;
- Whop subscription and billing information, such as subscriber or membership identifier, plan, billing period, payment or refund status, and purchase-support details received from Whop (Lotra does not receive or store your full payment-card number); and
- support or privacy-request communications and information needed to verify and respond to them.
Lotra Cloud is not designed to receive brokerage passwords, verification codes, account session tokens, API secrets, full brokerage account numbers, account balances, holdings, encrypted local backup files, or complete brokerage order history. If you voluntarily include sensitive information in a Discord, Whop, or support message, it may be processed as part of that communication.
Lotra Cloud may publish periodic community signal summaries in Discord based on published signal reference prices rather than individual user account balances, fills, or account identifiers. Discord and community members may view those messages according to the channel’s permissions and Discord’s policies.
3. Information on your computer
On Windows and macOS, Lotra stores and processes brokerage connectivity and portfolio data locally on your device. Depending on how you configure the application, local data may include brokerage usernames, passwords, user-supplied API credentials, verification prompts during sign-in, authenticated account sessions, account identifiers and labels, balances, buying power, margin, holdings, market quotes, transactions, order history, portfolio calculations, ticker-protection settings, consent records, cached profile images, and redacted local logs.
Saved credentials and local session secrets are stored in protected credential storage on your computer and restricted to your operating-system user account. One-time verification codes entered during sign-in are not saved to disk. Local data remains under your control and relies on your operating-system account, device security, disk encryption, and physical security.
If you export a local backup or transfer file to move settings, saved login profiles, or local portfolio history between your own computers, that file is encrypted locally using a passphrase you choose and is never uploaded to Lotra Cloud. Protect exported backup files and passphrases carefully and delete them when no longer needed. Uninstalling the application alone may not remove local application data, saved sessions, credentials, or logs.
4. Sources of information
Information may come from:
- you and your use of the desktop application;
- Discord when you sign in, verify server and role eligibility, or use community features;
- Whop and its payment processors when you subscribe, renew, cancel, dispute a charge, or request a refund;
- brokerages and market-data services you choose to connect or use locally;
- support or privacy communications you send; and
- the operation and security monitoring of Lotra Cloud.
5. How information is used
Lotra uses information to:
- sign you in with Discord and verify community membership and subscription eligibility;
- authorize and secure your device session, verify software compatibility, and record policy acceptance;
- deliver buy and sell signals, track completion status, and publish periodic community signal summaries;
- confirm subscription access, assist with billing support, and prevent payment fraud or abuse;
- display your Discord profile and account status in the application;
- operate, maintain, secure, and improve Lotra, Lotra Cloud, and software updates;
- review redacted diagnostic events to identify missed or failed orders and improve reliability;
- respond to support and privacy requests and enforce the Terms of Service;
- protect users, providers, and the Service from fraud, unauthorized access, and security incidents; and
- comply with applicable law, valid legal process, and accounting or recordkeeping obligations.
Lotra does not use Lotra Cloud data to assess investment suitability, provide personalized financial advice, or guarantee trading outcomes. Lotra does not use automated profiling to make eligibility decisions beyond standard access checks such as Discord membership, active subscription status, authorized device session, policy acceptance, supported software version, and request security.
6. Legal bases
Where required by law, processing is based on performing our agreement with you, taking steps you request before entering an agreement, legitimate interests in operating, securing, billing, and supporting Lotra, complying with legal obligations, protecting legal rights, or your consent where applicable. Withdrawing consent does not affect prior lawful processing and may make certain features unavailable.
8. No sale or targeted advertising
Lotra does not sell or rent personal information and does not share personal information for cross-context behavioral or targeted advertising. This website uses no advertising trackers, analytics scripts, or nonessential cookies.
If these practices change, Lotra will update this Policy and provide any legally required controls.
9. Retention
Temporary sign-in requests and short-lived security or rate-limit records are kept only for brief operational windows. Device sessions are retained until they expire or are signed out or revoked, plus a short cleanup period. Signal delivery and completion records are kept through their active window and up to about 30 days when needed for status reconciliation.
Redacted diagnostic events uploaded to Lotra Cloud are automatically deleted within 30 days. Local diagnostic logs rotate on your computer until overwritten or removed by you.
Subscription, billing, policy-acceptance, community signal-summary, security, support, and dispute records may be retained longer as reasonably needed for operations, billing, fraud prevention, accounting, dispute resolution, and legal compliance.
Information stored locally on your computer remains there until you sign out, use in-app removal options, or delete local application files, saved credentials, or exported backup files from your device.
10. Security
Lotra uses reasonable administrative and technical safeguards designed to protect information it processes, including encrypted network connections, access and session controls, data minimization, software update verification, rate limiting, and redacted logging. No system is completely secure. Protect your Windows or macOS account, Discord, Whop, and brokerage accounts, enable multifactor authentication where available, keep your software updated, and do not use Lotra on a shared or untrusted computer.
If you suspect unauthorized access to an account or device, sign out, contact the affected brokerage, Discord, and Whop as applicable, and request a private Lotra support channel without sharing passwords or secret codes.
11. Your choices and privacy rights
Depending on where you live and subject to legal exceptions, you may request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or an appeal of a privacy request decision. California residents may also have rights to know, delete, correct, limit certain uses of sensitive personal information, and receive non-discriminatory treatment when exercising privacy rights. Lotra does not sell or share personal information for targeted advertising.
To submit a privacy request, join the official Lotra Discord community, request a private support channel, identify your message as a privacy request, and describe the action you seek. Lotra may verify your request using your Discord account, subscription details, or other reasonable confirmation, and will respond within the timeframe required by applicable law. Authorized agents may submit requests where permitted by law, subject to verification of authority.
Deleting or disconnecting Lotra does not erase records independently held by a brokerage, Discord, or Whop, and Lotra may retain records needed for security, fraud prevention, billing, disputes, or legal obligations. Data stored solely on your computer is not accessible to Lotra and must be managed on your device.
Categories of personal information processed over the preceding twelve months may include account and device identifiers, network and security logs, subscription and commercial records, support communications, and limited signal-completion and redacted diagnostic summaries, as described above.
12. Children’s privacy
Lotra is solely for adults age 18 or older. Lotra does not knowingly collect personal information from minors or permit anyone under 18 to use Lotra. Contact us through a private Discord support channel if you believe a minor submitted personal information.
13. International processing
Lotra is operated from the United States, and Lotra or its service providers may process information in the United States or other countries whose privacy laws may differ from those in your jurisdiction. Where required, cross-border transfers rely on appropriate contractual safeguards, adequacy decisions, consent, or another lawful transfer mechanism. Where applicable, you may also contact your local data protection authority.
14. Changes to this Policy
Lotra may update this Policy as the Service, providers, or legal requirements change. Updated versions will show a revised date on this page, and material changes may require renewed acceptance in the application.
15. Contact
For privacy questions or requests, use the official Lotra Discord community and request a private channel. Never post brokerage passwords, verification codes, session tokens, full account numbers, payment-card numbers, or government identifiers. Lotra will never ask for those secrets in a support or privacy request.