Privacy Policy

This policy explains what Vanguard Point LLC (“Tapeworm”, “we”) collects on gettapeworm.com and tapeworm.app, why, and what you can do about it. We keep it short because there is not much to say: we collect what the product needs and nothing we could sell.

What we collect

• What you give us. On this site: the email address and details you enter in the early-access or prop-firm contact forms, including anything you write about your trading history. In the product: your account email, the prop firm and plan you select, and, if you connect a broker or upload a file, your trade fills (instrument, side, size, price, time) and account balances.
• What the product records. The market state shown on screen at the time of each fill, so the scorecard can be computed. Basic usage logs (pages, errors, timestamps) needed to run and debug the service.
• What we do not collect. Broker credentials: connections use read-only API keys or exports that cannot place orders. We do not run advertising trackers, sell data, or buy data about you from anyone.

Why we use it

• To provide the service: computing your distance to your firm’s rules, your scorecard and your performance record.
• To reply to you when you apply for early access or contact us.
• To keep the service secure, debug it, and understand which features are used.
• To produce anonymised, aggregated statistics (for example, breach rates by market regime). Aggregates never identify a person or an account.

Who else touches it

We use a small number of processors under contract: Vercel (hosting and privacy-respecting page analytics), Google (Google Analytics on this marketing site only), Supabase (database, encrypted at rest), Resend (email delivery), Stripe (payments, once paid plans open; see below), Groq (answers questions you ask Moneyness, the in-app guide, when her written answers don’t cover them; it receives the question and the on-screen numbers, never your name, email or fills), and, when you connect one, your broker’s API provider. Each sees only what it needs to do its job. We do not share your data with prop firms. If we ever offer a firm-bundled plan, the firm sees seat counts and anonymised aggregates, never your fills, unless you explicitly opt in.

Payments

Paid plans are billed by Stripe, which acts as the merchant of record for your subscription. When you pay, you enter your card or wallet details on Stripe’s checkout page, not ours. Stripe collects and stores them; Tapeworm never sees or stores your full card number, CVC or bank details. We keep only what we need to run your plan: your Stripe customer and subscription ids, the plan, its status and renewal date. Stripe handles sales tax and receipts, and processes your payment information under its own privacy policy.

Retention and deletion

Form submissions are kept until you ask us to delete them. Product data is kept while your account is open. In the product, Settings has two buttons: Export everything downloads one JSON file with your profile, accounts, balances, fills, sessions and report cards; Delete everything removes your login and all of it at once, immediately, with no 30-day wait and no undo; if you have a paid plan it is cancelled at Stripe first, so you are never charged again. Stripe keeps its own record of past payments (amounts, dates, the email used) for as long as tax and financial law requires; we cannot delete those, but you can ask Stripe directly. Form submissions and anything we hold outside the product are deleted on request: email hello@gettapeworm.com from the address you used and it is done within 30 days.

Your rights

Wherever you are, you can ask what we hold about you, correct it, export it, or delete it. If you are in California, the EU, the UK or another jurisdiction with specific privacy rights, those rights apply and the address above is where to exercise them. We do not sell or share personal information for cross-context advertising.

Cookies and analytics

The product (tapeworm.app) sets no tracking or advertising cookies. It uses a session cookie to keep you logged in, and counts page views with Vercel Web Analytics, which uses no cookies and does not identify you across sites.

This marketing site (gettapeworm.com) uses Google Analytics to understand how visitors find and use it. Google Analytics sets first-party cookies (named _ga and _ga_<id>, kept for up to two years) and sends Google your IP address, browser and device details and the pages you view. Google processes this under its own privacy policy. We do not use it for advertising or share it with ad networks. You can block it with your browser’s cookie settings or Google’s opt-out add-on. The site also counts page views with Vercel Web Analytics, which uses no cookies.

Age

Tapeworm is for people 18 or older. We do not knowingly collect data from anyone younger.

Changes

If this policy changes in a way that matters, we will email account holders before the change takes effect and update the date above.

Questions: hello@gettapeworm.com, or by post to Vanguard Point LLC, 30 N Gould St Ste N, Sheridan, WY 82801.