1. Scope and controller
This Policy applies to the Lotra desktop application, Lotra Cloud, Discord login and community features operated as the Lotra project, Whop billing and subscription records, support communications, and the static legal website. Lotra is responsible for personal information it receives for these services. Brokers, Discord, Whop, Cloudflare, market-data providers, and other third parties independently control information they receive under their own policies.
This Policy does not make Lotra responsible for information that a broker, Discord, Whop, or another provider collects directly from you. Review those providers’ notices before connecting an account or purchasing access.
2. Information processed by Lotra Cloud
Depending on the features you use, Lotra may process:
- Discord user ID, username, display name, avatar identifier or image URL, server membership, roles, Premium status, and administrator status;
- an installation or device identifier, optional device label, device-binding status, session status, and policy-acceptance records, including policy version, date, acceptance method, and age confirmation;
- temporary login-request and security information, including request timestamps, user agent, IP address, rate-limit records, error records, and abuse or incident metadata;
- signal and review information, including BUY or SELL action, ticker, share quantity or sell-all scope, broker scope, deadline, expiration, status, administrator identity, Discord message identifiers, quote time, availability summaries, and any potential-profit or cash-in-lieu estimate;
- execution and delivery information, including an opaque user/broker/account reference, ticker, action, submitted or filled quantity, fill price, cost basis, execution state, execution identifier, actual realized profit when available, estimated profit for an unfilled submission when calculated locally, timestamps, retry status, and uncertainty status;
- Whop-related subscription information, such as subscriber or membership identifier, plan, subscription status, billing period, payment status, transaction or refund status, and limited purchase-support information received from Whop. Lotra does not need to receive or store your full payment-card number to provide Lotra access;
- support or privacy-request communications and information needed to verify and respond to them; and
- information generated by the Service, including access, authentication, request, security, and operational records.
Lotra Cloud is not designed to receive brokerage passwords, authentication codes, browser-session cookies, API secrets, full brokerage account numbers, complete holdings, full balances, or full broker order history. Limited summaries and execution results derived from local broker activity are uploaded when required for cloud signal delivery, authorization, completion, reporting, or support. If you voluntarily include sensitive information in a Discord, Whop, or support message, it may be processed as part of that communication.
Lotra Cloud may generate weekly Discord reports containing broker names, a shortened account reference, and aggregate confirmed realized profit, pending estimates, or unavailable results. Discord and its members may receive those messages according to the channel’s permissions and Discord’s policies.
3. Information processed on your computer
Lotra may store or process locally provided broker usernames and passwords, Aries client credentials, multifactor or verification inputs while a login is in progress, authenticated sessions, cookies, browser profiles, short-lived tokens, broker and account identifiers, account labels and selectors, balances, buying power, equity, margin, holdings, quotes, transactions, cash flows, order history, portfolio calculations, protected tickers, tracked positions, execution safeguards, settings, legal-consent records, cached Discord avatars, and redacted diagnostic logs.
Broker credentials and supported session data are stored using the operating system’s credential or protected local storage facilities where available. One-time challenge codes are used through local prompts and are not intended to be saved. Local data remains under your control and relies on your Windows account, device security, encryption, filesystem permissions, and physical security.
You may choose to create or import encrypted transfer files or export portfolio data. Those files are under your control; protect them like any other financial record. Removing the executable alone may not remove application data, browser profiles, cached avatars, saved sessions, credentials, or logs.
4. Sources
Information may come from:
- you and your activity in the desktop application;
- Discord’s OAuth, server-membership, role, avatar, and interaction systems;
- Whop and its payment processors when you purchase, renew, cancel, dispute, or request a refund;
- connected brokers, market-data services, browsers, and operating systems;
- support or privacy communications you send; and
- the operation of Lotra Cloud, including security and delivery events.
5. How information is used
Lotra uses information to:
- authenticate Discord users and verify server membership, Premium entitlement, and administrator access;
- bind and secure an authorized installation, manage sessions, and record legal acceptance;
- provide signal delivery, order coordination, execution authorization, status recording, reconciliation, and weekly reporting;
- confirm subscription access, manage billing-related support, and prevent payment abuse or fraud;
- display a Discord profile avatar and account status in Lotra;
- operate, maintain, secure, rate-limit, debug, and improve the reliability of Lotra Cloud;
- respond to support and privacy requests and enforce the Terms of Service;
- protect users, providers, and the Service from fraud, abuse, unauthorized access, and incidents; and
- comply with law, valid legal process, and accounting or recordkeeping obligations.
Lotra does not use Lotra Cloud data to make a suitability determination for you, provide personalized investment advice, or guarantee trading results. Lotra does not use automated decision-making or profiling to make decisions about your eligibility beyond rule-based access checks such as Discord membership, Premium role, device binding, policy acceptance, payment status, and request security.
6. Legal bases
Where required, processing is based on performance of a contract with you, steps you request before entering that contract, Lotra’s legitimate interests in operating, securing, billing, and supporting Lotra, compliance with legal obligations, protection of legal rights, or consent where consent is required. Withdrawal of consent does not affect earlier lawful processing and may make a feature unavailable. Information necessary to authenticate, secure, bill, or deliver a requested feature may be required to use that feature.
8. No sale or targeted advertising
Lotra does not sell or rent personal information and does not share it for cross-context behavioral or targeted advertising. The static legal website has no advertising, analytics scripts, account forms, or nonessential first-party cookies.
If these practices change, Lotra will update this Policy and provide any opt-out or other controls required by applicable law. This statement does not limit sharing with Whop, payment processors, service providers, or other recipients described above when needed to operate Lotra.
9. Retention
Temporary OAuth login requests generally expire after about 10 minutes and are cleaned up after an additional short grace period. Request-security and rate-limit records are retained for short operational windows. Sessions are retained until they expire or are revoked, with a short cleanup period afterward. Signal, review, and delivery records are retained through their active or expiration window and may be retained for up to about 30 days when needed to reconcile an uncertain execution or deliver a delayed Discord update.
Subscription, transaction, payment-status, execution-ledger, weekly-report, legal-acceptance, access, security, support, and dispute records may be retained longer as needed for billing, reporting, fraud prevention, accounting, legal claims, provider disputes, and legal obligations. Current policy does not promise a fixed deletion date for those records. Whop, Discord, brokers, and provider logs follow those providers’ schedules.
Local information remains on your computer until you use available Lotra deletion or sign-out controls, delete the relevant files or credentials, or otherwise remove it from the applicable Windows application-data, browser-profile, and credential-storage locations. Backups and files you exported may persist separately.
10. Security
Lotra uses reasonable administrative and technical safeguards appropriate to the information and Service, including access controls, TLS, limited cloud data, session protection, signed device requests, rate limits, and redacted local logging. No system is completely secure. Protect your Windows, Discord, Whop, and brokerage accounts, use multifactor authentication where available, keep software current, and do not use Lotra on an untrusted or shared computer.
If you believe an account or Lotra installation is compromised, sign out, contact the affected broker, Discord, and Whop as applicable, and request a private Lotra support channel. Do not send secrets in the report.
11. Your choices and privacy rights
Subject to your location and legal exceptions, you may request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or an appeal of a covered request. California residents may also have rights to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and receive equal treatment for exercising applicable rights. Lotra does not currently sell or share personal information for targeted advertising, so there is no such sale or advertising sharing to opt out of at this time.
Submit a request through the official Lotra Discord community and request a private channel. Identify the request as a privacy request and provide a general description of the information or action you seek. Lotra may verify identity using Discord identity, an authorized installation, Whop subscription information, or other reasonable evidence. We will respond within the time required by applicable law. You may use an authorized agent where law permits; we may require proof of that authorization.
Requests to delete or disconnect a service do not necessarily erase information a broker, Discord, Whop, or another provider controls. Lotra may retain information needed for security, fraud prevention, billing, legal obligations, contract records, disputes, or completion of the request. Information stored only on your computer is not available to Lotra; manage it through Lotra and your operating system.
Categories processed during the preceding twelve months may include identifiers; internet or network activity; device, account, and security identifiers; commercial or service records; professional or support communications; and limited financial, payment, transaction, or execution information and summaries. The sources, purposes, recipients, retention, and absence of sale or targeted advertising are described above.
12. Children’s privacy
Lotra is for adults age 18 or older. Lotra does not knowingly collect personal information from a child under 13 or knowingly allow a minor to use Lotra Cloud or automated brokerage features. Contact us through the private Discord support channel if you believe a minor submitted information; do not post the information publicly.
13. International processing
Lotra is operated from the United States. Lotra and its providers may process information in the United States or other countries where privacy laws may differ from those where you live. Where required, transfers rely on an adequacy decision, appropriate contractual or provider safeguards, consent, or another lawful mechanism. Where applicable, you may complain to the privacy regulator or supervisory authority in your country or region.
14. Changes to this Policy
Lotra may update this Policy when the Service, law, providers, or data practices change. The effective date will be revised, and material changes may require new acceptance before continued access. The current version will be published at this page.
15. Contact
Submit privacy questions or requests through the official Lotra Discord community and request a private channel. Never post credentials, authentication codes, session data, full account numbers, payment-card details, or government identifiers publicly. Lotra will not ask you to disclose those secrets in a privacy request.