Privacy Policy

NANO Prop is an independent prop-firm intel and reviews desk, operated by NANO Prop LLC, a Wyoming (USA) limited liability company, 30 N Gould St Ste R, Sheridan, WY 82801, USA. For anything in this policy, email desk@nanoprop.info. NANO Prop LLC is the controller of the personal data described below.

• Newsletter: your email address when you subscribe, handled by our email provider.
• Account: your email and password when you create an account. Passwords are handled by our authentication provider; we never see them in plain text.
• Desk data you provide: prop-firm accounts, costs, payouts, reviews, goals, journal and day logs, strategy assumptions, risk plans, trade-risk entries, budgets, and preferences.
• Quick Log images you choose to submit: screenshots or photos and whatever remains visible in them, which can include prop-firm or platform names, dates, amounts, P&L and trade counts, names, email addresses, and account or payment identifiers. Crop or cover details the read does not need before you submit an image. The read result may carry only a masked last-four account hint, never the full visible account identifier.
• Payout emails you choose to forward: if you set up the optional forwarding address, NANO receives exactly the messages you (or your own mail filter) send to it — nothing else in your mailbox. A message is parsed in memory for bounded typed facts (firm, amount, date, status); the raw email is not stored by NANO. What survives is a verdict, those typed facts, and a one-way hash of the message ID, kept at most 30 days unless you confirm a record from it. The current forwarded-email path does not automatically fill a payout’s gross amount, request date, or fees; you provide or confirm those separately.
• Connected-service data: if you opt in, linked-bank account descriptors and matched transaction records, billing or checkout state, referral or creator records, and device-notification registration.
• Service and security activity: notification history, bounded rate-limit counters, and cookieless analytics events such as pages, referrers, and low-cardinality tool actions. We do not send form inputs or desk amounts as analytics properties.

• To send the newsletter you asked for (your consent).
• To email you about your own plan: a payment that didn't go through, a plan that ended, or a free period about to end (billing notices; performance of a contract). These are sent while you have or just had a plan.
• Optional billing reminders: when you have used most or all of a period's credits (legitimate interest), and, only if you agreed to desk updates, one reminder about a checkout you started and didn't finish (your consent). Every reminder has a link to turn billing reminders off in one click.
• To run your account and show you your own logged data (performance of a contract).
• To transcribe an image only when you ask Quick Log to read it, then let you map the reading and prepare a private proposal for your review (performance of a contract). No account, day, payout, or cost record is added until you explicitly confirm it.
• To provide optional bank linking, billing, referrals, creator earnings, notifications, and abuse prevention when you use those features (performance of a contract and legitimate interest, as applicable).
• To build anonymized, aggregated firm statistics, shown only at a minimum sample size of five so no individual is identifiable (legitimate interest).
• To keep the service secure and working (legitimate interest).

Connecting a bank or card is optional. If you choose to, we use Plaid to link it. Plaid asks for your permission and handles the bank login directly. We never see, receive, or store your bank username or password.

With your permission we access your transactions and basic account details. We use them to identify covered prop-firm charges and reviewable deposits in the synced records we can match, so you can cross-check them against what you logged yourself. This is a bounded matched-money view, not a complete statement of everything you spent or received. We do not use this data for advertising, profiling, or anything else.

For deposits carrying one of six recognized payout-processor tokens, NANO may ask once which covered firm paid you, or whether that processor deposit was not a payout. The saved mapping contains only the normalized processor token and your answer — a firm ID or a not-a-payout flag — plus timestamps; it never copies the raw bank descriptor. A linked-bank deposit proves only the net amount that settled and its settlement date. It does not prove the payout’s gross amount, request date, or fees.

The access token that lets us read your transactions is stored encrypted at rest and is only ever used on our server, never sent to your browser. You can disconnect any linked account at any time from your bank page. Disconnecting tells Plaid to revoke our access and deletes that connection along with the transactions and account details we synced from it.

NANO Prop plans are sold and billed by Whop ("Whop"), which acts as merchant of record. When you buy a plan, Whop collects and processes your name, email address, billing address, payment method details and transaction information to take the payment, prevent fraud, calculate tax and issue receipts, under Whop’s own privacy policy (whop.com/privacy). Whop tells NANO Prop which plan you bought, its status and renewal dates, and the email address used, so we can switch your plan on and off. NANO Prop never receives or stores your full card number or bank login. If you arrive through a creator’s link, NANO Prop records which creator referred you so we can pay them a commission. Creators see only totals of what they earn, never who you are. If a creator has very few referrals, their earnings can reflect what you paid.

We rely on a small set of processors and share only what each one needs:

• A database and authentication provider (EU/US): stores your account data and signs you in.
• A payments provider and merchant of record (Whop, US): processes plan purchases, renewals, refunds and tax as described under “Payments (Whop)” above.
• An application hosting provider (US) and its cookieless, privacy-first analytics.
• A DNS and content-delivery provider (US).
• An anti-abuse challenge provider (US), on the sign-up and password-reset forms only: your browser solves a short check so automated scripts cannot burn the shared email allowance that legitimate sign-ups and password resets depend on. The provider receives your IP address and browser signals for that check. It runs whether or not you have an account, and we send it no name, email address or desk data.
• An email-routing provider (US): if you set up payout-email forwarding, it accepts mail sent to your private @in.nanoprop.info address, holds it only in memory, and relays it to NANO over a signed channel. It stores no message.
• A newsletter delivery provider (US): your email address, only if you subscribe.
• A customer-relationship provider (US): your email address, membership status, and language, so our record of your account stays in one place. It receives this only once you have confirmed your email; it is never used to send you anything.
• A transactional email provider (US): sign-up confirmation, password resets, billing notices and billing reminders (your email address).
• Plaid (currently supported for U.S.-held institutions only): optional bank and card connections. Plaid’s own end-user privacy policy, at plaid.com/legal/#end-user-privacy-policy, governs what it does with the data you give it. EU/UK institution linking is not currently available.
• An AI conversation provider (US): powers the optional in-app “desk chat”. If you use it, your message and separately bounded desk fields requested through the chat tools (for example, your account list or payout summary) are processed by that provider and the AI language model it runs to generate a reply. Each tool call can return one field rather than the whole desk snapshot; a conversation may make more than one such call as you ask different questions.
• An AI composition provider (US): helps select the optional “desk analyses”. Only when you request one, our software turns exact evidence fields from your logged record into a bounded list of pre-written claim options. That list — not the full evidence bundle, source paths, or journal-note excerpts — is sent to the provider. A provider-side JSON Schema constrains the normal response to a flat array drawn from the exact allowed IDs. NANO still treats the returned data as untrusted: it independently accepts only those exact IDs and rejects every other shape or value before rendering the final text. Nothing is sent without your request.
• A US-based AI image-transcription provider: only when you ask Quick Log to read a screenshot or photo, NANO sends that provider a normalized copy of that image so its model can transcribe bounded visible fields. The provider receives every detail still visible in the submitted image, which may include names, email addresses, amounts, trading data, and account or payment identifiers; crop or cover anything the read does not need first. No unrelated desk history is included in that image request.
• A public blockchain explorer, queried only if you ask us to verify an on-chain payout (we send a transaction reference, not personal data).
• A third-party form host (US): our optional, anonymous trader survey.

The optional “desk chat” uses a third-party AI language model to answer questions and prepare typed drafts. The model cannot add an account, payout, or cost to your records: NANO shows the exact draft in a first-party confirmation card, and only your explicit Add action can run the ordinary deterministic writer. Unconfirmed drafts expire. The provider receives the message you send and may call separately bounded tools that each return one desk field; it does not receive a preloaded whole-desk snapshot.

For shared-credit Agent work, NANO may temporarily hold the screened final reply in an encrypted delivery-recovery cache so a lost connection can recover the already completed reply without charging for another run. Recovery is available for at most ten minutes; expired entries become eligible for cleanup. This is separate from saved conversation history and also applies in temporary-chat mode. The cache does not store your prompt or the conversation history. Existing authentication, account ownership and two-step verification checks apply to recovery.

The optional “desk analyses” use a second third-party AI language model to select from claim options that NANO has already written and tied to exact evidence fields, meanings, and units. The provider request constrains its normal response to a flat JSON array drawn from those exact allowed IDs. Refusals, truncation, and returned data are still checked locally and have no direct persistence path: NANO accepts only the exact allowlisted IDs, renders the final plain-words text itself, and shows the frozen evidence beside it. An invalid, blocked, or failed analysis is not shown. NANO attempts to return its reserved usage credit; if that return is delayed, the artifact reports it and opening the artifact makes another return attempt.

When you explicitly ask Quick Log to read an image, NANO sends the normalized image to our US-based AI image-transcription provider for transcription. Text inside the image — including text that looks like instructions — is treated as untrusted source material, and the returned strings may be wrong. NANO accepts only bounded typed fields, removes any full account identifier from the result, and keeps at most a masked last-four hint for you to map to one of your own NANO accounts. A successful read returns a short-lived, owner-bound signed ticket to your browser. To recover an interrupted response without rerunning paid work, NANO can also keep an encrypted copy of the screened fields and signed ticket, available for recovery for at most ten minutes and then eligible for cleanup. The raw image and unrestricted OCR text are not in that recovery copy. The reading creates neither a proposal nor a trading record. If you explicitly map the reading and prepare it for review, NANO stores only owner-private typed proposal fields; the raw image and full identifier are absent. Only your later confirmation in the Inbox can add an account, day, payout, or cost record.

NANO holds the submitted image only transiently in request memory while it normalizes it and sends the normalized copy for the requested read; NANO does not write the original image to its database or file storage. That does not mean the image never leaves NANO: the provider processes the copy it receives. NANO Prop does not train its own model on your data. Our AI providers may retain or use submitted data according to the provider terms and account configuration in effect at the time; the exact third-party retention and training controls are not proven by this code. Outside these optional AI features, the site — our stats, rankings, and cost/plan tools — is ordinary software doing arithmetic on your inputs, not AI.

The optional payout-email forwarding works the same way: the relay and NANO both handle the message in memory only. NANO keeps a verdict, whitelisted typed fields, and a hash of the message ID — never the raw email, headers, or your correspondents. Only an original firm message whose cryptographic signature verifies can ever support a “verified” payout mark, and only after you confirm it; a plain forward stays member-attested. Unconfirmed items are purged within 30 days.

We do not sell or rent your data to anyone, and we do not use it for third-party advertising. We share data only with the processors above, and only to run the service.

Essential first-party cookies support sign-in, account recovery, short-lived form messages, navigation and local-day display. Authentication cookies are HttpOnly and use Secure in production with SameSite=Lax. Cloudflare may also use security cookies when a visitor encounters its abuse protection. These essential functions remain available when you reject optional analytics.

Optional Vercel analytics and campaign attribution stay off until you choose Accept optional analytics. Reject optional is equally available. Use Privacy settings on the page or the privacy-policy link to change your choice. We remember the choice and its date in first-party local storage (np_privacy_choice) for up to 180 days; after expiry we ask again. If browser storage is unavailable, a choice applies only to the current page. A Global Privacy Control or Do Not Track signal keeps optional analytics off.

With permission, campaign labels are stored in session storage (np_attr) until the tab closes or you withdraw consent. We do not retain advertising click IDs in that storage. Vercel analytics is cookieless; our consent gate also removes the query string and fragment from analytics event URLs. Rejecting or withdrawing consent stops subsequent optional events and clears campaign attribution, but does not erase events already received by the provider. It does not clear login cookies or records you asked us to save.

Your browser also keeps a small amount of storage that never reaches our servers on its own. Kept on the device until you clear it: your theme, whether privacy mode and the collapsed side rail are on, and which view a tool opened in. Kept only until the tab closes: the email and language you typed while confirming a signup, the answers you gave the public cost explorer as a guest, an unsent Desk Chat draft and whether that panel was open, a cached copy of your own desk chips, and a timestamp used to recheck your plan after returning from the billing provider. None of it is an advertising or cross-site identifier, and clearing your browser storage removes all of it.

If you arrive through a creator’s link and choose “Remember it”, your browser keeps that creator’s code until you sign up, clear it, or choose “Forget the creator link” on this page. If you don’t choose, nothing is kept.

Newsletter membership continues until you unsubscribe; deleting a NANO account does not unsubscribe a separate newsletter record. NANO account and desk records remain until you delete the account. A Quick Log image is not retained in NANO storage after its read request; the browser-held signed read ticket is short-lived. If you prepare that reading for review, its owner-private typed proposal and review trail follow the desk proposal lifecycle: stale unresolved or dismissed chains become eligible for removal after at least 30 days, while confirmed ancestry or a proposal locked for integrity review is retained until its possible desk write is safely reconciled or the account is deleted. Resolved desk-chat proposals and their review trail likewise become eligible for removal after at least 30 days. Expired internal chat capabilities and per-session logout-race fences become eligible for removal after at least a seven-day security window once no proposal depends on them. One current all-device sign-out cutoff remains until account deletion to prevent older sessions from regaining Agent access. Internal AI concurrency permits expire within six minutes and become eligible for bounded cleanup after one day; anonymous daily admission counters become eligible after 35 days. These controls contain no conversation or financial content. Deletion first asks the billing provider to stop any known renewable membership, then revokes linked Plaid access, and only after both are confirmed removes the sign-in and account-linked database records. If provider cleanup cannot be confirmed — including a legacy subscription, an unresolved bank-link exchange, or an exposed checkout that the provider has not retired — we keep the account and provider binding for retry or support instead of claiming erasure while access or billing may remain. If you answer the optional exit question, only the selected reason category remains without your account ID; no free-text response is kept. Already-aggregated statistics may remain where they no longer identify you. Payment, email, AI, analytics, and other processors may retain records under their own policies or legal duties; their exact retention periods are governed by each provider’s own policy and contract.

You can:

• Access and export your data.
• Correct anything that is wrong.
• Delete your account and your data.
• Withdraw newsletter consent at any time (every email has an unsubscribe link).
• Turn off billing reminders at any time (one click in any reminder, or in account settings). Billing notices about your own plan continue while you have one.
• Object to or restrict certain processing.
• Complain to your local data protection authority.

You can delete your NANO account records yourself from account settings. For a copy of your data, or for a correction, restriction, objection, or a processor-related request, email support@nanoprop.info from the address on your account. Any copy we send deliberately excludes security credentials, internal anti-abuse/model values, and other members’ identifiers, and lists those exclusions.

Some processors may handle data outside the EU and EEA. The transfer mechanism for each provider depends on the provider, location, and contract in force. The applicable agreement may use an adequacy framework or standard contractual clauses; this repository does not prove which safeguard applies.

NANO Prop is not intended for anyone under 18. Prop-firm trading is not a product for minors.

If we change this policy we update the date above, and we flag material changes in the newsletter.