Lucid Terminal Lucid Terminal
Features Pricing Getting Started Platforms About Web Discord
WebDownload

Privacy Policy

Effective: 2026-04-23 · Last updated: October 23, 2026 · Lucid Entities LLC · California, USA

This Privacy Policy explains how Lucid Entities LLC ("we," "us," "our") — the company behind Lucid Terminal — collects, uses, and protects your information. It applies to the Lucid Terminal desktop app, lucidterminal.io, and our associated VPS services. By using Lucid Terminal you agree to this policy.

One sentence summary: We collect only what we need to run the product and the anonymized data pool. We never sell, rent or share your personal information or your trade data — identifiable or anonymized — with anyone, for money or anything else. Paid tiers can opt out of the data pool. Free tier contribution is mandatory and disclosed here and in our Terms of Service.

1. Who we are

Lucid Entities LLC is a limited liability company registered in the State of California, United States. Contact: support@lucidterminal.io. Privacy-specific requests: privacy@lucidterminal.io.

2. What we collect

Account data (required to use Lucid Terminal)

  • Email address + hashed password (argon2id, salted)
  • Subscription tier, Stripe customer + subscription IDs (for paid users)
  • Bot-features consent version + timestamp (if accepted)
  • Data-pool opt-out flag (paid tiers only)
  • Login timestamps + source IP addresses (for abuse prevention — rotated every 90 days)

Trade + account data

When you connect a broker, your account data is synced from that broker to our servers through its official connection, on an ongoing basis while the connection is active: futures accounts through Tradovate’s API (using the sign-in you grant under our NinjaTrader vendor program), and stock and options brokerages through SnapTrade (see Section 5). The desktop app may also read your account directly from the broker and forward the results to our servers. We sync balances, open positions, pending and recent orders, and executed trades. This data is stored in our database, associated with your Lucid user account:

  • Trade fills: timestamp, symbol, side, size, price, P&L, fees
  • Account snapshots: balance, buying power, cash, margin, positions count; account name, account type, and the last four digits of the account number
  • Stock and options holdings and orders: symbol, quantity, average cost, market value, order type and status, and option contract details (underlying, call/put, strike, expiration)
  • Indicator readings: EMA / VWAP / RSI / DOM and any custom indicator values at trade time
  • Broker + firm attribution (e.g. "topstepx", "tradovate", or the brokerage name) for tenant separation
  • Connection tokens: the Tradovate access and refresh tokens you grant, and the SnapTrade user ID and secret that link your Lucid account to SnapTrade — encrypted at rest on our servers. If you connect a firm with an API key in the web terminal, that username and API key are also stored encrypted on our servers.

Journal + vault notes

  • Obsidian vault sync: if you connect an Obsidian vault in the desktop app while signed in, the app uploads the Markdown notes in that vault to our servers so you can view your journal from the web terminal. These notes are stored with your Lucid account.
  • Optional GitHub connection (Settings → Journal Destination → Connect Git): when you sign in with GitHub, the access token GitHub issues is stored encrypted on your own computer using the operating system’s secure credential store (Windows or macOS). It is used only to list or create your journal repository and to push your journal to the repository you choose on your GitHub account (the app can create a private one for you). The token is never sent to our servers.

What we do NOT collect

  • Your broker or brokerage passwords — futures accounts sign in on Tradovate’s own page, and stock and options brokerages sign in on SnapTrade’s hosted portal; we receive account, position, and order data, never your password. Any broker login or API key you enter in the desktop app is encrypted on your computer using the operating system’s secure credential store (Windows or macOS) and is never transmitted to us.
  • Market data tied to you — quotes and price history shown in the app come from licensed data providers or from the prices brokers report during sync, and are stored per symbol, not per user
  • Payment card numbers — Stripe handles billing end-to-end; we only see Stripe customer IDs
  • Government ID images or selfies — if you have lost access to your email and reset a PIN through support, the identity scan happens on Stripe Identity’s hosted page. We receive only the result (verified or not) and a session reference; the images never reach our servers

3. How we use it

  • Run the product: display your terminal, analytics, and trade log; route your account to the right broker API
  • Build the aggregated data pool: combine anonymized, aggregated trade metadata from all contributing users to power strategy ranking
  • Improve the product: identify bugs, performance issues, and feature requests from usage patterns (never from individual trade content)
  • Bill you: Stripe processes paid-tier subscriptions; we receive subscription state updates via webhook
  • Contact you: transactional emails (verification, password reset, receipt), important product announcements, and, only if you opted in or have an account with us, occasional marketing emails (see “Marketing emails” below).
  • Comply with law: respond to valid legal process (court order, subpoena) when required

Marketing emails

If you ask for our free tools or the weekly market brief, we first send you one confirmation email and send nothing else until you click its link (double opt-in). We keep a record of your consent: the wording you saw, the date and time, your IP address and country, the page you signed up on and your browser type. After you confirm, we send you what you asked for, plus occasional Lucid Terminal tips, product news and offers. You can withdraw your consent at any time.

If you have a Lucid Terminal account with a verified email, or you joined our waitlist, we may also email you about Lucid Terminal, such as free-trial offers, product updates and plan offers. Waitlist members receive only emails about getting access and trial offers. We never buy, rent or scrape email lists, and we do not sell your email address.

Every marketing email contains a one-click unsubscribe link and our postal address. When you unsubscribe, we stop at once and keep your address on a suppression list only so that we do not email you again. Receipts, security notices and other messages about your account are not marketing and still reach you. If an email bounces, or you mark it as spam, we stop sending marketing email to that address.

Our marketing emails include a small image that counts opens and links that count clicks, and we match a trial or subscription that follows a click to that email. We use this only to see which emails are useful. Some email apps block or hide it. Marketing emails are sent from our own address through our email provider, Resend, which acts as our processor. You may ask us at any time to delete or export the data we hold about you (see Section 6).

4. The Lucid data pool

A core feature of Lucid Terminal is the aggregated data pool — an anonymized corpus of trades, indicator readings, and P&L outcomes across all contributing users. The data pool powers:

  • Indicator confluence grading (A+ / B / C setups)
  • Market-condition pattern discovery (what worked in what session)
  • Personalized bots built from your own trade history
  • The clocking tool — aggregate session and setup statistics, and recommended position caps, shown back to contributors (basic on Free, full on paid plans)
  • The nightly bot performance review on plans that include it (statistics about your own bots; nothing is applied without you)

Free tier users contribute by default. This contribution is the value exchange that makes the free tier possible. It is disclosed in the Terms of Service at signup and again in this policy. Your individual trades are never exposed to other users — only aggregated outputs (e.g. "42% of users traded MNQ long at 09:30 NY session today") are surfaced.

Paid tier users (Pro, Elite, Lab, Lifetime) can opt out at any time via Settings → Privacy & Data → turn off the “Aggregated data pool” toggle. Once opted out, no new trades contribute. Trades contributed before opt-out remain in the aggregated corpus (they were valid consideration at the time given) but are anonymized after 90 days.

After 90 days, every trade row's user_id column is replaced with a one-way HMAC-SHA256 hash. At that point the data is legally de-identified per CCPA §1798.140(m) and cannot be re-associated with you even by us.

5. Who we share with

We share data only with the following service providers, and only to the extent needed to operate the product:

  • Stripe — payment processing (PCI-DSS Level 1 certified)
  • SnapTrade — brokerage-connection provider for stock and options accounts. You sign in to your brokerage on SnapTrade’s hosted portal; SnapTrade holds that connection and passes us your account, balance, position, order, and trade-history data. We never receive your brokerage password. We share with SnapTrade only what is needed to link your connection to your Lucid account (a SnapTrade user ID tied to your account) and to carry out close/cancel requests you make.
  • Tradovate (NinjaTrader) — for futures accounts we connect to Tradovate’s API under the NinjaTrader vendor program using OAuth. You sign in on Tradovate’s own page and approve access; the resulting tokens are held encrypted on our servers and used to read your accounts and carry out actions you request. We never receive your Tradovate password.
  • Our VPS host — data storage and hosting; contractually bound to confidentiality
  • Email provider — transactional email delivery (Resend)
  • Cloudflare — DDoS protection and email routing
  • Stripe Identity — identity verification only when you reset a PIN through support because you cannot use your email. You scan your ID and a selfie on Stripe’s page; Stripe stores the images under its own privacy policy and tells us only whether the check passed.
  • Stripe Connect — affiliate payouts. If you join the affiliate program, Stripe collects your payout, identity, and tax details directly; we see your connected-account ID and the amounts paid.
  • Discord — support tickets you open in the app may be relayed (subject, your message, your account email) to a private, staff-only channel on our Discord server so the team can respond. Other users cannot see that channel.

Notification channels. We reach you by email (always, for security notices), in-app messages, desktop notifications and browser push (if you turn them on). Each optional channel can be turned off in Settings → Notifications.

Third-party market and reference data shown in the terminal (EIA, FRED® government series, CFTC, U.S. Drought Monitor, USDA NASS, USGS, NASA, NOAA, OpenStreetMap contributors, TradingView Lightweight Charts, and the others listed in the Terms §16.1) flows from those providers to our servers to you. We do not send them anything about you; they see requests from Lucid’s servers, not from your device.

Affiliate program. If you subscribe with an affiliate’s code, that affiliate learns that a referral converted and the commission amount — never your name, email, or trading data.

We do not sell or share personal information with any third party, and we never will. This includes advertisers, data brokers, ML training providers, prop firms and brokers. We do not "sell" or "share" personal information as those terms are defined in the CCPA/CPRA (§1798.140), we do not use it for cross-context behavioral advertising, and we never sell, rent or license the anonymized data pool either — it is used only to improve Lucid Terminal itself.

The only third parties who see your aggregated (anonymized) trade data are other Lucid Terminal users viewing aggregate terminals. They see patterns; they never see identifiers.

6. Your rights (CCPA and beyond)

If you are a California resident, you have these rights under the California Consumer Privacy Act:

  • Right to know (CCPA §1798.100): request a copy of the personal information we hold about you
  • Right to delete (CCPA §1798.105): request deletion of your personal information held within the most recent 90 days
  • Right to correct (CCPA §1798.106): request correction of inaccurate personal information
  • Right to opt out of sale (CCPA §1798.120): not applicable — we do not sell personal information
  • Right against discrimination (CCPA §1798.125): we will not discriminate against you for exercising any of these rights. Note: feature-gated data exchanges (e.g. free tier requires data pool contribution) are permitted under §1798.125(a)(2) as value-exchanged services, not discrimination.

To exercise any of these rights, email privacy@lucidterminal.io from the address associated with your Lucid Terminal account. We verify identity via email challenge before fulfilling requests to prevent impersonation. We respond within 45 days per CCPA §1798.130(a)(2).

In-app deletion: you can request deletion of your contributed trade data directly from Settings → Privacy & Data → Delete my data. The deletion is scheduled 7 days out, and you can cancel it any time before then. It deletes your trade records within the 90-day personally-identifiable window. Data older than 90 days has already been anonymized per §1798.140(m) and is out of scope for CCPA deletion. To delete your account and all other personal information we hold, email privacy@lucidterminal.io as described above.

7. Cookies + tracking

The Lucid Terminal desktop app does not use cookies. Authentication is via sign-in tokens stored encrypted in the operating system’s secure credential store (Windows or macOS).

lucidterminal.io uses minimal technical cookies only:

  • A security (CSRF-protection) token cookie set when you load a page
  • Sign-in cookies for the web terminal (access and refresh tokens, and short-lived two-factor and identity-verification cookies)
  • Rate limiting is based on your IP address, not a cookie

The website and web terminal also keep display preferences (such as collapsed panels) in your browser’s local storage.

We do not use Google Analytics, Facebook Pixel, marketing trackers, or cross-site tracking of any kind.

To see how the website is used, lucidterminal.io keeps its own cookieless, first-party usage statistics: page views, time on page and clicks on key buttons. Nothing is stored in your browser, no personal identifiers or IP addresses are kept (a visitor is an anonymous code that changes every day), nothing is shared with third parties, and the raw records are deleted after 90 days. If your browser sends Do Not Track or Global Privacy Control, nothing is recorded.

8. Security

  • All traffic to and from our servers is encrypted in transit over HTTPS (TLS)
  • Passwords are hashed with argon2id (memory-hard, designed for password storage)
  • Broker logins and API keys you enter in the desktop app are encrypted at rest on your computer using the operating system’s secure credential store (Windows or macOS) — we never see them
  • Broker connection tokens we hold (Tradovate OAuth tokens, your SnapTrade user secret, and any API key entered in the web terminal) are encrypted at rest with AES-256-GCM
  • Sign-in refresh tokens are stored only as one-way SHA-256 hashes and are replaced on every use
  • Database backups are encrypted before they are written and are deleted on a rolling schedule
  • Admin actions are written to an append-only audit log
  • Our staff can see your account activity (for example linked wallets, balances and trades made through Lucid) only to support you, prevent abuse and meet legal duties. Every such view is logged, and you can see when it happened and why in Settings → Privacy → Who accessed my data
  • In the event of a confirmed breach, we notify affected users within 72 hours per applicable law

9. Children

Lucid Terminal is for adults who are capable of legally trading futures on regulated exchanges. We do not knowingly collect personal information from anyone under 18. If you believe a child under 18 has provided us with personal information, email privacy@lucidterminal.io and we will delete it immediately.

10. International users

Lucid Terminal is operated from the United States. By using the Service, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your home country. If you are a European Economic Area (EEA) resident, note that we operate under CCPA rather than GDPR; both standards are substantially similar for the type of data we handle.

11. Changes to this policy

We may update this policy periodically. Material changes (new categories of collected data, new purposes, new third-party sharing) will trigger an in-app banner and an email to the address on file — you'll have at least 30 days' notice before the change takes effect. Trivial changes (typo fixes, rewording) can happen without notice; we document all changes in the commit history of this document at github.com/lucidentbusiness/lucid-terminal-legal (once that repo goes public).

12. Contact + complaints

Questions: privacy@lucidterminal.io. We respond to privacy emails within 5 business days for simple questions, within 45 days for formal CCPA requests.

If you are dissatisfied with our response, you have the right to file a complaint with the California Attorney General's office at oag.ca.gov/privacy/ccpa.

Version 1.1 · Last updated: October 16, 2026 · Next review: 2026-10-23

LUCID TERMINAL

The trader’s journal & control room.
Built by Lucid Entities LLC — formed July 2024.

Product
Features Copy Trader Pricing Compare Download
Company
About Contact
Legal
Privacy Policy Terms of Service How your data is protected
2026 Lucid Entities LLC·California
support@lucidterminal.io

Operated by Lucid Entities LLC, an authorized vendor in the NinjaTrader ecosystem. Trading futures, options, stocks and crypto involves substantial risk — full disclosures & CFTC notices.