Security at LiveFXPlan

Broker server details, account numbers and trading passwords are submitted over an encrypted connection and stored server-side in encrypted form.

Credentials and connection tokens are never sent to your browser and never appear in front-end code. The browser only receives the display information it needs, such as balance, equity, positions and connection state.

Credentials are not written into ordinary application logs.

All traffic to LiveFXPlan uses HTTPS/TLS. Stored data is encrypted at rest by our managed database and storage providers, and sensitive connection fields are encrypted before storage.

Every table holding user data is protected by row-level database policies, so records are only readable by the account that owns them. One user cannot read another user's accounts, trades or journal.

Sensitive actions are authorised server-side. Administrative access is a separate server-side role and can never be granted by anything editable in the browser.

Administrative actions and security-relevant events are recorded in an audit trail.

Subscription payments are processed by our payment provider. We receive a billing name, country, transaction reference and payment status. We never receive or store full card numbers.

Payment status is taken from verified provider webhooks, never from anything the browser sends.

No. LiveFXPlan does not hold client trading funds, does not accept trading deposits and has no ability to withdraw money from your broker account. Withdrawals are controlled entirely by your broker.

A trading-level connection can place or modify orders on the connected trading account, because that is what closing a position or moving a stop requires. That permission is separate from money movement.

Account details, connected trading account data permitted by your broker connection, journal entries you write, subscription records, and technical data used to secure the service.

You can export your data or delete your account at any time. See the Privacy Policy for retention periods and your rights.

Email support@livefxplan.com with the details. Please do not post security issues publicly before we have had a chance to respond.

We do not hold a security certification and do not describe the platform as bank-grade or similar. This page describes the controls that are actually in place.