Privacy Policy
This policy explains what personal data PYE Markets (proveyouredge.com) collects and how we use it, in line with Malaysia's Personal Data Protection Act 2010 (PDPA) and, for readers in the EU or UK, the GDPR.
What we collect
- Email address, if you subscribe to our newsletter or contact us.
- Following a writer by email: your email address, which writer you follow, when you confirmed, and whether you ticked “Share my email”. The writer sees your address only if you ticked that box (they can download a list of those readers); otherwise they only see a follower count. Every email has an unsubscribe link that works at any time, and members can turn these emails off in Account settings.
- Posts and profile details you choose to publish (name or handle, role, links, the content itself).
- Usage data: on the main site pages (home, the prop-firm directory and firm pages, and articles) Vercel Web Analytics, run by our host Vercel, records pages viewed, the referring site, device and browser type and approximate country, plus a few clicks such as copying a promo code or opening a firm's site, without cookies. We also count unique daily readers ourselves: a one-way code made from your IP address and a random value that we delete after each day, plus the page you arrived on and the site that referred you. It can't identify you or link your visits across days. We use no other analytics or advertising trackers; if we add one, we will list it here first.
- Product counts: we count how the product is used, in aggregate only: how many sign-ups, welcome setups finished, desk visits, journal entries and trades saved, posts and setups published, share-button clicks, AI apps connected, email opt-ins, members active again one and seven days after signing up, and page loads by section of the site. Each is a daily total. No cookie is set and no IP address, browser details or account id is stored with these counts. The return counts are worked out once a day from dates your account already has (when you signed in, opened your desk or saved a journal entry); nothing extra is recorded about you. If your browser sends Do Not Track or Global Privacy Control, it sends us no page-load or share counts at all, and isn't included in the daily reader count above.
- Paid-subscription interest: if you ask (while signed in) to be told when a writer offers paid subscriptions, your account and which writer, so we can send you one email when it launches. The writer sees only how many readers asked, not who.
- Writer waitlist: if you join the waitlist at /writers, the email address and details you give, used only to contact you about writing on PYE Markets.
- Error reports: what you write in the "Report an error" form, the page it concerns and, if you choose to give it, your email address so an editor can follow up.
- Technical data: IP address, used only in hashed form to limit abuse (for example, how many posts or votes come from one connection per day), and error reports when a page breaks.
- Tips and corrections you send us: the details you submit, and your email if you choose to give it so we can follow up.
- Your trading journal (if you use /journal while signed in): the entries (pre-market plans, post-session reviews, weekly recaps and week-ahead preps, with the market-data or week-stats snapshot saved alongside each), trades, private scored setups, follow-up notes, playbooks, screenshots and the watchlist of tickers you add. Your watchlist and journaled tickers are used only to pick which earnings dates to show you and which companies our public market-event calendar keeps earnings history for; they are never shown to anyone else. Journal content is private to you, the account owner: no other member, writer or reader can see it, and we never use it for marketing, never sell it and never show it to others or publicly. We never use it to train any AI model, and we don't send it to any AI service ourselves. An AI app can read or write your journal only if you connect that app yourself (see AI apps you connect), with the permissions you choose, until you disconnect it. It is stored in our database (Cloudflare D1) and is not end-to-end encrypted, so like any online account it is protected by access controls rather than encryption we can't read. Screenshots are stored as images reachable by their long, unguessable link. You can export your journal (JSON, or your trades as CSV) and delete it at any time from the journal's Settings; deleting your account deletes it too. The daily operations report our editors receive counts only how many entries were saved and how many members used the journal, never any content. Publishing from the journal doesn't exist yet; if we add it, it will only ever happen when you choose to publish a specific entry.
- AI apps you connect (see /ai): if you sign in to PYE Markets from an AI app (such as Claude or ChatGPT) or create a personal access key, we keep the app's or key's name, the app's website, the permissions you chose and when it was connected and last used. Keys and sign-in tokens are stored only as one-way fingerprints (SHA-256). The app can only do what you allowed: read your journal, save journal entries and follow-up notes, or save post drafts; it can never publish. What the tools return goes to that AI provider under its own terms; your prompts and conversations never reach us. You can disconnect an app or revoke a key at any time in your account settings.
- Data stored on your device: drafts, saved articles and preferences are kept in your browser's local storage and never leave your device unless you publish. On the main site pages the browser also keeps a short list of the Vercel Analytics clicks above, and for the current tab the page you arrived on and the referring site; these stay on your device.
Why we use it
To run the site, send the newsletter you asked for, show your published posts, prevent spam and abuse, fix errors, and understand which content is useful. We do not sell personal data, and we don't use it for third-party advertising.
Who processes it
Our hosting and infrastructure providers: Vercel (website), Cloudflare (API and database), Resend (email delivery), Google (only if you choose Google sign-in) and GitHub (our internal issue tracker for error reports and tips, without email addresses). They process data only to provide their services to us, and some of them store it outside Malaysia.
How long we keep it
Newsletter emails until you unsubscribe. Published posts until you or we remove them. Your journal until you delete an entry, delete the journal or delete your account (deleted journal content is removed straight away; our private database backups, which may still contain it, are deleted after 90 days). Connected AI apps until you disconnect them or they go 60 days unused (the record of a disconnected app is deleted after 90 days); personal access keys until you delete your account. Hashed abuse-prevention counters for up to 48 hours; hashed one-vote-per-person records on firm pages for up to 12 months. Error reports, and tips you send us, for up to 12 months.
Your rights
You can ask to access, correct or delete your personal data, or withdraw consent to emails at any time. Every newsletter will include an unsubscribe link. Email hello@proveyouredge.com and we'll respond within 21 days.
Changes
We'll update this page when our practices change; the date at the top shows the latest version.