This Privacy Policy explains how PnL Plus, operated by LAYERONE SYSTEMS PTE. LTD., collects, uses, shares, retains, and protects personal data when you use https://pnl.plus and related services. It also explains your choices and rights under privacy laws including the EU/UK GDPR and Singapore Personal Data Protection Act 2012.
PnL Plus is operated by LAYERONE SYSTEMS PTE. LTD., a company registered in Singapore with UEN 202554830W, at 10 Anson Road, #20-05, International Plaza, Singapore 079903.
For personal data processed through PnL Plus, LAYERONE SYSTEMS PTE. LTD. is the data controller or organisation responsible for the processing, unless this Policy says otherwise. You can contact us at support@pnl.plus.
This Policy applies to PnL Plus, a premium trading journal and verified track-record platform available at https://pnl.plus. It covers account registration, sign-in, broker and brokerage connections, analytics, optional public performance profiles, support, feedback, waitlist communications, and related website use.
PnL Plus is not a broker, exchange, investment adviser, or money manager. We read trading account data at your instruction so we can provide analytics and profile features. We do not place, modify, or close trades and we do not move funds.
We collect the information needed to create, secure, and operate your PnL Plus account:
If you choose Sign in with Google, we use Google Identity Services to authenticate you. We receive the Google account email address, Google-verified email status, and basic profile information such as your name from the Google ID token. We use this to create, find, or secure your PnL Plus account.
We do not access your Google contacts, files, Google Drive, calendar, mailbox, or other Google account content.
When you connect a trading account, we collect the information needed to read that account:
Broker credentials are encrypted at rest using AES-GCM and are used only to read the account. Where your broker offers a read-only or investor password, we recommend that you use it.
We collect limited technical and operational data needed to run and improve the Service:
We use only a small number of cookies and browser storage entries for the Service:
We do not use advertising cookies, cross-site tracking cookies, or third-party advertising identifiers.
We use personal data for the following purposes:
We do not sell personal data and we do not use personal data for third-party advertising.
Where the EU or UK GDPR applies, we rely on the following legal bases:
When we rely on legitimate interests, we consider your interests, rights, and expectations and use safeguards appropriate to the data involved.
For users whose personal data is protected by Singapore's Personal Data Protection Act 2012, we collect, use, and disclose personal data for purposes that a reasonable person would consider appropriate in the circumstances, including the purposes described in this Policy.
Where consent is required, your consent may be express or deemed under the PDPA when you voluntarily provide data for a stated purpose. You may withdraw consent by contacting us, but withdrawal may limit or prevent our ability to provide parts of the Service, including broker connections, analytics, account security, or support.
PnL Plus uses broker credentials and API keys only to read account data and compute analytics. The Service never places, modifies, or closes trades, never submits orders, and never moves, deposits, or withdraws funds.
You are responsible for ensuring that you are allowed to connect a trading account to PnL Plus and that doing so complies with your broker's rules. Disconnecting a trading account deletes the stored broker credentials immediately.
Public performance profiles are off by default and are controlled by you. If you enable a public profile, we display only the information selected or made available through that feature, subject to the privacy settings we provide.
Privacy layers allow monetary amounts to be hidden, shown as percentages, or masked where supported. Your private journal layer, including notes, tags, and playbooks, is never published in a public profile. You can unpublish or change a public profile at any time.
We share personal data only as needed to operate the Service, follow your instructions, comply with law, or protect rights and security. Recipients may include:
We require service providers that process personal data for us to use it only for authorised purposes and to protect it appropriately. We do not sell personal data.
We are based in Singapore and may process personal data on servers or with providers in Singapore and other countries. Those countries may have privacy laws that differ from the laws where you live.
Where international transfer rules apply, we use appropriate safeguards or permitted transfer mechanisms, such as contractual protections, data-processing terms, Standard Contractual Clauses where relevant to GDPR transfers, and measures required by the Singapore PDPA to ensure that transferred personal data receives a comparable standard of protection.
We keep personal data only for as long as reasonably needed for the purposes described in this Policy, unless a longer period is required or permitted by law.
You may request deletion by using account settings where available or by contacting support@pnl.plus.
We use technical and organisational measures designed to protect personal data, including TLS in transit, salted PBKDF2 hashing for PnL Plus account passwords, AES-GCM encryption at rest for broker credentials, access controls, logging, and operational security practices.
No online service can guarantee absolute security. You should use a strong, unique password for PnL Plus and use read-only or investor broker credentials where available. If you believe your account or broker credentials may be compromised, contact us promptly at support@pnl.plus.
Depending on where you live and which laws apply, you may have rights to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to processing, portability of data, withdrawal of consent, or information about how your data has been used or disclosed.
Under the Singapore PDPA, you may request access to personal data that we hold about you and information about how it has been used or disclosed, and you may request correction of inaccurate personal data. Under the EU/UK GDPR, you may also have rights to object, restrict processing, receive portable data, or complain to a supervisory authority.
To exercise a right, contact support@pnl.plus. We may need to verify your identity and may ask for information needed to locate your account. We will respond within the timeframe required by applicable law.
We do not use personal data for automated decision-making, including profiling, that produces legal effects or similarly significant effects for you. PnL Plus analytics, statistics, and verification signals are informational outputs based on trading data and are not decisions about your legal rights, access to credit, employment, insurance, or similar matters.
The Service is intended for users who are at least 18 years old. We do not knowingly collect personal data from children or allow children to create accounts. If you believe a person under 18 has provided personal data to us, contact us and we will take appropriate steps to delete it.
If you have a privacy concern, please contact us first at support@pnl.plus so we can try to resolve it. You may also have the right to complain to your local data protection authority. In Singapore, you may contact the Personal Data Protection Commission. In the EEA or UK, you may contact your local supervisory authority.
We may update this Policy from time to time. We will post the updated version on this page and update the Last updated date. For material changes, we will provide additional notice where appropriate.
You can contact LAYERONE SYSTEMS PTE. LTD. at support@pnl.plus or by post at 10 Anson Road, #20-05, International Plaza, Singapore 079903.