Table of contents
RuleGate legal
Subprocessors
Providers that support RuleGate hosting, authentication, storage, billing, and user-authorized integrations.
Last updated: 2026-10-20
Current provider categories
Supabase
Provider information- Purpose:
- Authentication, application database, and private screenshot storage.
- Data:
- Account, application state, journal, integration metadata, feedback, and stored files.
- Region/transfer note:
- Processing location depends on the configured Supabase project region and provider infrastructure.
Vercel
Provider information- Purpose:
- Web application hosting, delivery, server functions, and operational logs.
- Data:
- Request metadata, IP address, device/browser information, and data handled by server functions.
- Region/transfer note:
- Vercel operates global infrastructure; applicable transfer safeguards are described by Vercel.
Resend
Provider information- Purpose:
- Transactional and support email delivery for account and support communications.
- Data:
- Email address, message content, support ticket references, delivery metadata, and related contact information needed to send the communication.
- Region/transfer note:
- Resend processes email delivery data using its provider infrastructure and describes applicable privacy and transfer safeguards in its documentation.
Stripe
Provider information- Purpose:
- Hosted checkout, subscription billing, invoices, payment status, fraud controls, and Customer Portal.
- Data:
- Account identifiers, contact details, subscription and transaction information. RuleGate does not store full card details.
- Region/transfer note:
- Stripe describes its international transfer arrangements in its privacy documentation.
Google Analytics 4
Provider information- Purpose:
- Consented page-view and conversion-funnel measurement.
- Data:
- Sanitized page path and referrer origin, technical identifiers, demo and sign-up events, and verified purchase transaction ID, amount, currency and plan. No account names, emails or trading records are sent by RuleGate.
- Region/transfer note:
- Google processes analytics data under its own privacy and international-transfer terms. The tag loads only after Analytics consent.
Meta Platforms (Meta Pixel and Conversions API)
Provider information- Purpose:
- Consented measurement of RuleGate's own advertising campaigns, such as the RuleGate Challenge.
- Data:
- Page views, campaign funnel events with a shared event ID, technical identifiers (_fbp/_fbc cookies), and for server events a SHA-256 hashed email address, IP address and user agent. No trading records, journals or credentials are sent.
- Region/transfer note:
- Meta processes this data under its own privacy and international-transfer terms. The Pixel and server events run only after Marketing consent.
MetaApi
Provider information- Purpose:
- Read-only MetaTrader 5 connection and trade-history synchronization when enabled by a user.
- Data:
- Connection details, encrypted credentials, account metadata, and imported trading history.
- Region/transfer note:
- Processing depends on MetaApi infrastructure and the account deployment region.
Bybit
Provider information- Purpose:
- Read-only account and trade-history synchronization when enabled by a user.
- Data:
- Encrypted API credentials, connection metadata, and imported trading history.
- Region/transfer note:
- Processing may occur in locations described by Bybit and depends on the connected account.
Connected brokers and exchanges
Provider information- Purpose:
- Provide user-authorized account and trade records through their APIs or an integration intermediary.
- Data:
- Account metadata and trading history selected by the user.
- Region/transfer note:
- The provider and region depend on the service the user connects.
User-selected providers
When a user connects a broker, exchange, or integration, that provider also processes information under its own terms and privacy notice. RuleGate sends data only as needed for the user-authorized, read-only workflow described in the product.
Future providers
Any future advertising, affiliate, or additional infrastructure provider will be added here when actually configured. Optional providers must remain disabled until the applicable consent is given.
Changes
This list may change as RuleGate infrastructure or features evolve. Material changes affecting how personal data is processed will be communicated as required. Provider links describe their own current commitments; RuleGate does not add guarantees not contained in those arrangements.