Privacy Policy

Lockout Sync is operated by FIBORB LLC, an Illinois limited liability company. This policy explains what we collect, why, how long we keep it, and what you can ask us to do with it. It covers the Lockout Sync mobile application and the masterlockoutsync.com website.

1. Information you give us

• Account details — your email address and a password. Passwords are never stored; only a salted scrypt hash is kept, which cannot be reversed into your password.
• Your name and country — collected when you create an account. Your name is used to address you in the app and in email; your country is recorded to meet our legal and tax obligations and to know which markets we serve.
• Optional details — which prop firm or broker you use, how you heard about us, and whether you want marketing email. All three are optional, none affects the service, and marketing consent is recorded separately from your acceptance of the Terms so that agreeing to the Terms never signs you up for email.
• Brokerage credentials — if you choose to add a connection, the username and password for that brokerage account. These are encrypted at rest with AES-256-GCM and are used for one purpose only: signing in to that brokerage on your behalf so the app can read your accounts and act when you instruct it to.
• Support messages — anything you send us through the support form or by email.

2. Information collected automatically

• Device identifier — a random identifier generated by the app. It is not your advertising ID, hardware serial, or any identifier that follows you across other apps.
• IP address and timestamps — recorded at sign-up, at sign-in, and when you accept our Terms of Use. This is kept as a record of consent and to detect abuse.
• App version and diagnostic information — to reproduce faults you report.
• Brokerage account data — balances, positions, orders and drawdown figures, retrieved from your brokerage while the app is running so it can display them and act on them. One summary row per account per trading day — that day's P&L and closing balance — is kept, encrypted, for your journal, and deleted with your account.
• Your journal notes — whatever you choose to type against a trading day, in your own words. Stored encrypted with the rest of your journal, editable and erasable from the app at any time, and deleted with your account. It is never analysed, never used in any decision about your account, and never shared.

3. What we do not do

We do not sell your personal information. We have never done so and have no plans to. We do not share it with data brokers, advertisers or analytics networks.

We do not use your trading data for any purpose other than operating the app for you. Your balances, positions and activity are not aggregated, analysed for our benefit, used to inform anyone else's trading, or sold in any form, anonymised or otherwise.

We do not place trades. The app can only close positions and cancel orders. It cannot open a position or enter an order.

We do not run advertising or third-party trackers. There is no analytics SDK and no tracking pixel in the application. Meta's Facebook sign-in SDK is in the app only so that you can sign in with Facebook: the app starts it only when you tap that button, its automatic event logging and advertising-identifier collection are switched off, and the app requests no advertising-identifier permission.

4. Payment information

Payments are processed by Stripe. We never see, receive or store your card number. Card details are entered on Stripe's own hosted page and go directly to Stripe. We receive only a customer identifier and your subscription status.

5. Service providers

We share the minimum necessary with a small number of providers who act on our behalf:

• Stripe — payment processing and subscription billing.
• Resend — sending account, security and support email.
• DigitalOcean — hosting the servers on which the service runs.
• Cloudflare — DNS and email forwarding for our domain.
• Google — only if you choose to sign in with Google. In that case we receive your email address, name and a Google account identifier, and we store that identifier so we can recognise you next time. We do not receive your Google password and have no other access to your Google account.
• X — only if you choose to sign in with X. In that case we receive your X account identifier, name and username, and we store the identifier and name so we can recognise you next time. We do not take your email address from X: you enter one yourself and confirm it with a code. We do not receive your X password and have no other access to your X account.
• Facebook (Meta) — only if you choose to sign in with Facebook. In that case we receive your Facebook account identifier and name and, if you allow it, the email address on your Facebook account, and we store the identifier and name so we can recognise you next time. That email address is only offered back to you to confirm with a code; it is not used until you do. We do not receive your Facebook password and have no other access to your Facebook account.

We also connect to your brokerage on your instruction. What that brokerage does with your data is governed by their own privacy policy, not this one.

6. Legal disclosure

We may disclose information where we are required to by law, valid legal process, or where it is necessary to protect our rights, safety, or the safety of others.

7. How long we keep things

• Account and brokerage credentials — until you delete the connection or your account, then removed.
• Terms acceptance records — retained after account deletion. These are our record that you agreed to specific terms at a specific time, and we may need them to defend a legal claim.
• Free trial record — a one-way hash of your email address is retained permanently so that one free trial per person can be enforced. It contains no readable personal information and cannot be reversed into your email address.
• Support messages — retained for two years.

8. Deleting your account

You can delete your account and its data at any time, by any of three routes:

• In the app — Manage → Account & Plan → Delete account. Takes effect immediately.
• On the web — masterlockoutsync.com/delete-account. Sign in there and it is deleted immediately, or send us a request from that page.
• By email — write to support@masterlockoutsync.com from the address on the account. Actioned within 30 days, and usually the same day.

Deletion removes your account, your name, your email address, every broker connection and the credentials stored for it, your journal, all sessions on every device, your two-factor settings, and your support messages. What we keep afterwards, and why, is set out in section 7 above.

Deleting your Lockout Sync account does not close any open positions and does not affect your accounts at your prop firm or broker. Those remain entirely yours.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to withdraw consent to marketing communications. To exercise any of these, email support@masterlockoutsync.com. We will respond within 30 days.

You can unsubscribe from marketing email at any time using the link in any such message. Service and security email — billing notices, password resets, outage warnings — cannot be switched off while your account is active, because they are necessary to operate it.

10. Security

Credentials and session tokens are encrypted at rest with AES-256-GCM. All traffic between the app and our servers is encrypted in transit with TLS. Passwords are hashed with scrypt using a unique salt per account. Two-factor authentication is available and we encourage it.

No system is perfectly secure. You are responsible for your device, your account password, and for keeping both out of other people's hands.

11. Children

Lockout Sync is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has provided us with information, contact us and we will delete it.

12. International users

Our servers are located in the United States. If you use the service from elsewhere, your information will be transferred to and processed in the United States.

13. Changes

We may update this policy. Material changes will be notified in the app or by email before they take effect, and the date at the top of this page will change.

14. Contact

FIBORB LLC · Illinois, United States
support@masterlockoutsync.com