Security and data practices

Encrypted in transit. All traffic to TickerTrust and our API is served over HTTPS/TLS.

Managed authentication. Accounts and sessions are handled by Supabase, with row-level security enforcing that your data is visible only to you.

Payments. Billing runs through Stripe. Card details are entered on Stripe’s systems and never touch TickerTrust servers — we never see or store your card number.

API access. API keys are bearer tokens scoped to your account, with published rate limits. Webhook payloads are signed with HMAC-SHA256 so you can verify they came from us.

Your data is yours. Export a complete JSON copy of your account at any time from Settings, or delete your account and its data outright.