Privacy Policy
Last updated: 19 August 2026
1. Who we are
Tessera is operated by Tessera Trades Ltd, a company registered in England and Wales.
- Registered address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
- Company number: 17259024
- ICO registration number: [ICO NUMBER]
We are the data controller for the information described in this policy. If you have any questions, contact us at support@tesseratrades.com.
This policy covers the Tessera dashboard, our website, and any related services.
2. Information we collect
Account information
- Name, email address, and password (stored hashed, never in plain text)
- Subscription plan and account settings
- Any profile details you choose to add
Trading data
- Trade records imported from your broker or uploaded by you: instruments, entry and exit prices, times, position sizes, profit and loss, fees and commissions
- Account balances and cash transfers, where your broker connection provides them
- Notes, tags, and descriptions you add to trades, reports, and strategies
- Pine Script source code you paste into a strategy
- Reports, simulations, and policies you generate
Broker connection credentials
Where you connect a broker account, we store the credentials needed to retrieve your trade history. Depending on the broker, this may be an API key and secret, an API token, an account identifier, or an OAuth token.
These credentials are encrypted at rest. We only ever request read access. We do not place trades, close positions, move funds, or take any other action in your broker account.
Payment information
Payments are processed by Stripe. We do not receive or store your full card details. We receive limited billing information such as the last four digits of your card, card type, expiry, billing country, and transaction history.
Usage data
- Pages viewed, features used, and actions taken in the product
- Device and browser type, operating system, approximate location derived from IP address
- Timestamps, error logs, and performance data
Communications
- Messages you send to support, and our replies
- Records of broker integration requests you submit
3. How we use your information, and our legal basis
| What we use it for | Legal basis |
|---|---|
| Providing the Tessera dashboard and its features | Performance of a contract |
| Retrieving your trade history from connected brokers | Performance of a contract |
| Generating reports, statistics, simulations, and policies | Performance of a contract |
| Taking payment and managing your subscription | Performance of a contract |
| Responding to support requests | Performance of a contract |
| Keeping the service secure and investigating misuse | Legitimate interests |
| Understanding how the product is used so we can improve it | Legitimate interests |
| Sending product updates and marketing emails | Consent, which you can withdraw at any time |
| Meeting our legal and tax obligations | Legal obligation |
Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights. You can object to this processing at any time using the contact details in section 14.
4. Broker connections
When you connect a broker account, Tessera retrieves your trade history so it can be shown and analysed in your account.
What we ask for. Only read access. For brokers that issue API keys, we ask you to create keys with read permissions only. For brokers that use OAuth, we request the minimum scope needed to read your trade history.
What we do not do. We do not place trades, modify orders, close positions, withdraw funds, or take any other action in your broker account. Tessera is not a broker and does not execute anything on your behalf.
How credentials are stored. Encrypted at rest. Access is limited to the systems that need it to retrieve your trades.
How to disconnect. You can remove a broker connection from your account settings at any time. This deletes the stored credentials. Trades already imported remain in your account until you delete them or close your account.
Market data. To show your trades against price action, we retrieve historical candle data from Binance, Interactive Brokers, and OANDA. This is market data, not personal data, and is not linked to you beyond the trades you are viewing.
5. AI processing
Tessera uses AI for one purpose only: generating the written summary text that appears in reports.
What is used.Google's Paid API.
What is sent. Aggregated statistics and findings from the report being generated. This does not include your name, email address, broker credentials, or payment details.
What is not done with it. Google does not use data submitted through the paid API to train its models. Your trading data is not used to train any AI model, by Google or by us.
No other feature of Tessera uses AI. Your trades are not analysed by AI unless you generate a report.
6. Who we share your information with
We do not sell your personal information, and we do not use it for advertising.
We share information with the service providers listed below, each of which processes data only on our instructions and under a data processing agreement.
| Provider | What they do | Where |
|---|---|---|
| DigitalOcean | Hosting for the Tessera application and database | Frankfurt, Germany (EEA) |
| Vercel | Hosting for our marketing website | United States |
| Stripe | Payment processing | United States and Ireland |
| AI-generated report summaries (Gemini API) | United States | |
| Resend | Transactional and marketing email delivery | United States |
| PostHog | Product analytics | US Cloud |
A current list is maintained at tesseratrades.com/legal/sub-processors. We will give notice before adding a new sub-processor that handles personal data.
We may also disclose information where required by law, regulation, or valid legal process, or to protect the rights, safety, or property of Tessera, our users, or others.
If Tessera is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
7. Where your data is stored and processed
Your trading data and account information are stored in Frankfurt, Germany, within the European Economic Area.
Some of our service providers process data outside the UK and EEA, as set out in the table above. Where that happens, transfers are covered by the UK International Data Transfer Addendum, Standard Contractual Clauses, or another approved safeguard.
Our team works remotely. Personnel located in the United Kingdom, Vietnam and Bulgaria access production systems in the course of operating and supporting the service. Access is limited to what is necessary, protected by multi-factor authentication and device encryption, and covered by the security measures in section 9.
8. How long we keep your information
While your account is active, we keep your data for as long as you use Tessera.
When you cancel your subscription, your data is retained for 30 days after your plan ends. After 30 days, your trading data, broker credentials, reports, simulations, strategies, and policies are deleted.
When you delete your account, the same 30-day period applies before your data is deleted.
Exceptions. We keep billing and transaction records for six years to meet UK tax requirements. These are invoice records, not your trading history. We may also keep information longer where we are legally required to, or where it is needed to establish or defend a legal claim.
Backups. Deleted data may persist in encrypted backups for a short period before those backups are rotated out.
9. Security
We take the following measures to protect your information:
- Encryption in transit (TLS) and at rest
- Broker credentials encrypted at rest, with read-only access requested wherever the broker supports it
- Passwords stored hashed, never in plain text
- Multi-factor authentication on production systems
- Access limited to personnel who need it
- Hosting on infrastructure with recognised security certifications
No system is completely secure, and we cannot guarantee absolute security. If a breach affects your personal data and is likely to result in a high risk to your rights, we will notify you and the ICO as required by law.
10. Your rights
Under UK and EU data protection law you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data, in certain circumstances
- Restrict how we process your data
- Object to processing based on legitimate interests, and to direct marketing at any time
- Portability: receive your data in a structured, commonly used, machine-readable format
- Withdraw consent where processing is based on consent
You can export your trade data directly from the dashboard at any time.
To exercise any of these rights, contact support@tesseratrades.com. We will respond within one month. We may ask you to verify your identity first.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. If you are in the EEA, you can complain to your local supervisory authority.
11. Cookies and analytics
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the product is used.
We use PostHog for product analytics. This records how features are used so we can improve them.
Our full cookie policy is at tesseratrades.com/cookies.
You can manage cookies through your browser settings, though disabling them may affect how the service works.
12. Children
Tessera is not intended for anyone under 18, and we do not knowingly collect personal information from children.
13. Changes to this policy
We may update this policy. If we make material changes, we will update the date at the top and, where appropriate, notify you by email or in the product.
14. Contact
Tessera Ltd
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
support@tesseratrades.com