Xchange

Privacy Policy

Effective September 22, 2026. Operated by ACE Systems LLC.

This policy describes what Xchange collects when you use usexchange.app and the Windows desktop app. It is the operator's description of the product. It is not legal advice about your own obligations.

Account data

An account is a handle plus one or more passkeys. We store the credential id, the public key, a signature counter, and the transports the authenticator reports. We do not store a password, and we do not receive the private key. We also store the display name, an optional bio, an optional profile picture, the watchlist you save, and the time the account was created. We do not ask for your email address, your legal name, or a brokerage account.

Signing in sets an HTTP-only cookie named xchange_session on usexchange.app. It lasts up to 30 days, is marked Secure and SameSite=Lax, and is used only to recognize the session. Signing out deletes that session. The desktop app links to the same account with a short-lived device link opened in your browser. We store the linked device id.

What you submit

If you are signed in, we store:

• posts you publish, including the symbol, whether you marked long or short, text, and any photo or video;
• whether that post was sent to the feed, your journal, or both;
• replies, follows, and buy or sell reactions on feed posts;
• a follow-up photo or video you attach to your own post;
• an outcome label you add to your own trade, such as TP, SL, or BE;
• notes you add to a post in your journal.

Posts you send to the feed are visible to other people. Your handle is your name on that feed and in chart rooms. Journal posts and journal notes are stored so we can show them to the account that wrote them. They are not placed on the public feed or on another person's profile. A photo or video attached only to a journal post is not served to other people.

There are no guest nicknames. Reading the public feed does not require an account. If you are not signed in, we do not build a profile of you from that browsing.

The desktop app

While presence is on, the app sends the symbol of the chart you are viewing and your handle so other people in that symbol's room can see that you are on the chart. That mark is dropped within a few minutes of leaving. The app does not send chart prices, intervals, drawings, positions, account size, orders, or TradingView session tokens.

The app can read a TradingView numeric user id from the local TradingView Desktop storage folder, and a username for display inside the app. The id may be sent with your room presence. It is unverified. We do not use it to sign in to TradingView. The username shown in the app stays on the device unless a later version of the app says otherwise on this page.

Voice is off until you unmute. Unmute opens the microphone and sends live audio to other people in the same room through Cloudflare Realtime. Mute closes the microphone track. We do not save a recording of your voice in your account.

How we use information

We use this information to:

• run accounts, the feed, the journal, and chart rooms;
• show your public posts and handle to other people;
• keep journal material limited to you;
• enforce the Terms of Use and the EULA, and investigate abuse;
• keep the service reliable and secure.

We do not sell your personal information. We do not use it for third-party advertising. We do not use your journal as training material for a public model.

Processors and logs

The service is hosted on Cloudflare. Account records are in Cloudflare D1. Photos and video are in Cloudflare R2. Live voice uses Cloudflare Realtime. Those processors handle data to provide the service. Request logs may include IP address, user agent, and the time of the request. We use those logs to operate and protect the service. We do not use them to build an advertising profile.

How long we keep it

Account data, feed posts, and journal material stay until you delete them or delete the account. Settings has Delete account. That removes the handle, passkeys, sessions, posts (including trades), replies, journal notes, photos, video, and follows. It cannot be undone. Signing out only ends the browser session. A trade post cannot be deleted on its own while the account exists. Session cookies expire after 30 days or when you sign out. Room presence is not a permanent history of the charts you opened. Server logs are kept only as long as the hosting logs are kept.

Children

Xchange is for people 18 and older. We do not knowingly collect personal information from children. If you believe a child has created an account, send a privacy request through Support and we will delete it.

Your choices

You choose what to post, whether a post goes to the feed or only to your journal, and whether the desktop app shares chart presence or your microphone. You can sign out in the site menu. You can remove a non-trade post you wrote. You can delete the whole account in Settings. You can stop using the service at any time.

Changes and contact

We may update this policy by posting a new version on this page and changing the effective date. ACE Systems LLC was formed in Ohio and operates Xchange at usexchange.app. Privacy requests and other issues can be submitted at Support, or by email to support@usexchange.app. A form request stores the message, the reply address you enter, your handle if you are signed in, and the IP address, and emails that request to ACE Systems LLC.