Privacy Policy
Effective date: September 13, 2026. This policy explains how RulesFirst handles personal information, trading workflow data, and read-only brokerage or financial-data information you authorize.
1. Information We Collect
RulesFirst may collect account and contact information, authentication information, subscription and billing records processed by our payment provider, product usage data, device and log data, support messages, marketing-source and referral-attribution identifiers, trade-planning inputs, journal entries, uploaded trade files, and brokerage or financial-data information you authorize us to access.
2. Brokerage And Financial-Data Information
If you connect a broker, custodian, trading platform, or financial-data provider, RulesFirst may receive read-only account, balance, position, order-history, execution-history, transaction, symbol, timestamp, and related metadata depending on provider availability and your authorization. RulesFirst does not place trades, transmit orders, move money, custody assets, or write to brokerage accounts.
3. How We Use Information
We use information to provide and improve the service; operate trade-planning, journaling, alerting, analytics, risk-workflow, and broker-sync features; process subscriptions; attribute eligible partner referrals; administer and protect the Partner Program; prevent referral abuse and fraud; provide support; secure the service; communicate with users; comply with legal obligations; and understand product performance.
4. How We Share Information
We may share information with service providers that help us run RulesFirst, including hosting, database, email, analytics, customer-support, payment, security, partner-attribution, and broker/data-integration providers. These providers may process information only for the services they provide to RulesFirst and subject to applicable contractual restrictions. We may also disclose information when required by law, to protect rights and security, in connection with a business transaction, or with your direction or consent.
5. SMS Messaging And Trusted Safety Contacts
If you consent to receive SMS messages from RulesFirst, we may use your mobile phone number to provide transactional notifications associated with the RulesFirst Trusted Safety Contact feature. Message frequency varies based on applicable trading activity, with no more than one alert per trading day for this trigger. Message and data rates may apply. You may opt out at any time by replying STOP and may reply HELP for assistance.
6. No Sharing Of SMS Consent For Marketing
RulesFirst does not sell, rent, or share mobile phone numbers, SMS opt-in data, or SMS consent information with third parties or affiliates for their marketing or promotional purposes. We may use service providers to deliver transactional messages, but they are not permitted to use SMS consent information for their own marketing.
7. No Sale Of Customer Trading Data
RulesFirst is a subscription software product. We do not sell customer trading data as a business model, and we do not use broker-connected trading data to target third-party advertising. If this changes, we will update this policy and provide choices required by applicable law.
8. Cookies, Browser Storage, Logs, And Analytics
RulesFirst uses cookies and similar technologies, including local storage and session storage. Necessary storage supports security, authentication, privacy preferences, site operation, and the short-lived referral handoff described below. Optional analytics is enabled only after you accept analytics through our preference control. You may accept, decline, or revisit that choice through Cookie preferences in the site footer. Browser and device settings may also let you limit storage, although required functionality may be affected.
9. Partner And Referral Attribution
If you arrive through an approved partner link, RulesFirst may receive an opaque Dub click identifier in the URL. The marketing site validates that identifier and stores the first valid value in session storage for the current browser-tab visit so it can remain available while you navigate the site. When you choose to enter the RulesFirst app, the identifier is sent to app.rulesfirst.com with the signup URL. The marketing site does not store partner email addresses, RulesFirst user IDs, authentication tokens, or the app's referral cookie for this handoff. RulesFirst and its partner-attribution provider may use the identifier to associate an eligible signup or paid subscription with a partner, administer commissions, investigate fraud, and maintain program records. Session storage generally ends when the browser tab or session closes; attribution records created by the app or partner platform may be retained as needed for the program, accounting, fraud prevention, disputes, and legal obligations.
10. Retention And Deletion
We retain information for as long as needed to provide the service, maintain business records, resolve disputes, enforce agreements, secure the platform, comply with legal obligations, and support legitimate operational needs. You may request deletion by contacting privacy@rulesfirst.com, subject to retention that may be required or permitted by law.
11. Security
We use technical, administrative, and organizational safeguards designed to protect information, including encrypted connections and access controls. No security program can guarantee that data will never be accessed, disclosed, altered, lost, or unavailable.
12. Your Choices And Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of certain personal information, or to object to or limit certain processing. To make a request, email privacy@rulesfirst.com. We may need to verify your identity before completing a request.
13. Third-Party Services
Brokerages, custodians, financial-data providers, payment processors, partner-attribution platforms such as Dub, app stores, and other third-party services may collect and process information under their own terms and privacy policies. RulesFirst is not responsible for third-party privacy or security practices.
14. Minors
RulesFirst is not intended for children under 18, and we do not knowingly collect personal information from children under 18.
15. Changes And Contact
We may update this Privacy Policy as the service, law, or our practices change. For privacy questions or deletion requests, email privacy@rulesfirst.com. For security questions, email security@rulesfirst.com.