Effective date: March 7, 2026 · Version 1.0
We collect what you give us (account info, posts, messages), what your device shares automatically (security logs, crash/error events, privacy-friendly analytics), and, if you connect a broker, read-only trade history and account metadata to verify posts. We do not see cash balances, position sizes, or dollar amounts.
We use this to run and improve Stance, verify trades, power community features, keep the platform safe, and manage subscriptions. Your portfolio value stays private to you.
Our aggregated market insights program is separate and optional. It uses anonymized, cohort-level data with a minimum k-anonymity of 10. Your account works the same if you don't opt in.
Questions or requests? Email contact@trystance.com.
Stance is a community and analytics platform for real trading activity - "Strava for trading." People share verified trade events, build public track records, and participate in communities. We are not a broker and we never place orders, hold funds, or provide personalized investment advice.
The operator is Stance (operated by Ferdinand Pfanzelter Vetleseter pending incorporation of Stance Technologies OÜ in Estonia). If you have privacy questions or want to exercise your rights, email contact@trystance.com.
When you create an account, you provide your name, email, username, password, and basic profile details. When you post trades, you choose what to publish - ticker, action (buy/sell/watch), entry and exit prices, P/L, and timestamps, plus any optional commentary. Community activity includes follows, likes, comments, and group participation. If you contact support, we collect the content of those communications.
When you use Stance, your device and our servers exchange technical data: IP address, device type, OS and app version, performance metrics, crash logs, and security events. We run privacy-friendly product analytics (EU-hosted PostHog) to understand usage and improve the app. Where consent is required for non-essential analytics under applicable law, we obtain it before those analytics are activated.
If you connect a supported broker, the connection is always user-initiated, read-only, and revocable at any time. We use it to verify that a posted trade actually occurred. We receive trade history and limited account metadata needed for verification. We do not have trading authority, cannot place orders, never see cash balances in dollar terms, and do not collect position sizes or dollar amounts. OAuth tokens are encrypted, access-restricted, and deleted immediately when you disconnect.
Portfolio values and private performance dashboards are visible only to you inside your account.
We use your information to run Stance, deliver features you ask for, and keep the platform safe. That includes creating and managing your account, showing your posts to the audiences you choose, verifying trades, powering leaderboards and personal analytics, and enabling community features. We use technical data to secure our systems, prevent fraud and abuse, debug issues, and improve performance. We manage subscriptions and communicate with you about product updates, security alerts, and, with your consent, marketing messages.
We do not execute trades, hold funds, provide personalized investment advice, or offer copy-trading. Your portfolio value remains private to you. Public trade posts never include position sizes or currency amounts.
We offer an aggregated market insights program for financial research institutions. Participation is entirely optional and requires a separate, clear in-app opt-in. If you opt in, we may include your trade and community signals in an anonymization pipeline that produces cohort-level analytics only. Each released metric reflects behavior from at least 10 distinct participants per cohort. We never provide individual-level data to market research partners. If you opt out or withdraw consent, your data is excluded going forward and your Stance account continues to work normally with no feature loss.
This section maps our processing to GDPR Article 6. We do not process special categories of data under Article 9.
We share personal data only as needed to run Stance, subject to contracts and safeguards:
Stance does not sell individual user data. Stance does not share personally identifiable trading data with any third party.
Broker connections on Stance are always user-initiated, always read-only, and always revocable instantly in settings. We are building our permission architecture to be compatible with the EU's open finance framework from day one, so permissions are clear, traceable, and easy to withdraw.
You have the right to access your personal data, request correction of inaccurate data, and request deletion. You may ask us to restrict processing, receive a portable copy of your data, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time in settings or by contacting us.
You also have the right to lodge a complaint with a supervisory authority. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). You may also contact your local authority.
Deletion requests are completed within 30 days. Aggregated datasets that have been irreversibly anonymized are outside GDPR's scope and cannot be unwound.
To exercise any of these rights, email contact@trystance.com.
We keep your personal data only as long as needed for the purposes described here or as required by law. Data in active accounts is retained for the life of the account. After you request deletion, most personal data is deleted within 30 days. Broker connection data and OAuth tokens are deleted immediately when you disconnect. Aggregated and anonymized data that no longer relates to an identifiable person may be retained indefinitely.
Stance operates under Estonian law pending incorporation of Stance Technologies OÜ. Transfers within the EEA do not require additional mechanisms. Transfers to the UK are currently covered by an EU adequacy decision. Where data is transferred outside the EEA without adequacy, we use European Commission Standard Contractual Clauses with supplementary measures including encryption and data minimization.
We protect your data with encryption in transit and at rest, strict access controls, and audit logging. We monitor our systems, limit access to those who need it, and review our controls regularly. No online service can be 100% secure, but we work hard to protect your information and respond quickly to issues.
Stance is not directed to minors. You must be 18 or older to use the Service. If we learn that a minor has registered, we will delete the account and related personal data promptly. Contact us at contact@trystance.com.
We will notify you of material changes in-app and by email with reasonable advance notice. Continued use after the notice period constitutes acceptance of the updated policy. This policy will be updated to reflect Stance Technologies OÜ as the contracting entity upon incorporation.
Stance (operated by Ferdinand Pfanzelter Vetleseter pending incorporation of Stance Technologies OÜ in Estonia)
All enquiries including support, data protection, and legal: contact@trystance.com