Privacy Policy

What we collect

• Your account: your email address and a password, which is stored only as a secure hash by our sign-in provider. If you use an email sign-in link, no password is stored. If you continue with Google, Google tells us your email address, name and profile picture, and no password is stored; we don't get access to anything else in your Google account.
• Trading data you bring in: fills (symbol, side, quantity, price, time, fees) read from files you upload or trades you enter by hand, the trades built from them, your account names, and the history of your imports. Uploaded files are read to get the fills; the files themselves aren't kept.
• What you write: trade notes, ratings, stops and targets, tags, playbooks, journal entries and your trading rules.
• Broker connections: the read-only access token your broker issues (such as an Interactive Brokers Flex token), encrypted before it is stored.
• Technical data: the sign-in cookies described in the Cookie Notice, and the request logs (such as IP address and browser) our hosting providers keep to run and protect the service.
• Usage and errors: which pages you open and a few actions (such as finishing an import or adding a screenshot), tied to your account's internal id, and reports of errors the app runs into. Page addresses are stripped of filters, and these never include your email, your trades or anything you write.

We don't collect government ID or your broker password. Payment details, when needed, are entered directly with Stripe. Broker sign-in happens on the broker's own site.

Plans and payments

We store your plan, trial dates, monthly trade usage, subscription identifiers and access expiry to provide the features included in your plan. When you choose a paid subscription, Stripe processes payment details on its hosted checkout. TraderDx does not receive or store your full card number.

How we use it

• To run TraderDx for you: build your trades and show your statistics, reports, calendar and check-up.
• To keep the service secure, prevent abuse and fix problems.
• To see which features are used, so we know what to improve.
• To contact you about your account, such as sign-in emails and, when they exist, notices that a sync failed.

We don't sell your data, share it with advertisers, or use it to train shared AI models. There are no advertising trackers, and our usage analytics don't use cookies or record your screen.

Who we share it with

Only the providers that run TraderDx for us, under agreements that limit them to doing that:

• Supabase: database and sign-in.
• Vercel: hosting the website and app.
• Stripe: paid checkout, subscription management and payment records. We share an internal account identifier for billing; we do not send your trading history to Stripe.
• Sentry: error reports, with cookies, request details and query strings removed before they're sent.
• PostHog (US): usage analytics, without cookies or screen recording.

We also disclose data if the law requires it, and would tell you first where we're allowed to. If TraderDx is ever sold or merged, this policy keeps applying to your data unless you agree otherwise.

How it's protected

• Each user's data is separated at the database level, so one account can't read another's.
• Data travels over encrypted connections, and broker tokens are encrypted at rest.
• TraderDx staff can see your account details, imports and errors, and can open your trades and journal, only to give you support, fix problems or keep the service secure. Staff sign in with a second step (an authenticator code), opening your trades or journal needs a stated reason, and every access is recorded in a log that can't be changed. Staff never see your password or your broker tokens.
• No method is perfectly secure; we'll tell you promptly if a breach affects your data.

How long we keep it

For as long as you have an account. When you delete your account in Settings, your account and all its data are removed from our database straight away, and any stored broker tokens with them. Copies in our providers' backups are deleted when those backups expire on their regular schedule. Payment records held by Stripe may be retained for accounting and legal obligations. The permanent admin audit log retains records of staff access and tier changes.

Your choices and rights

• See and correct your data in the app at any time.
• Download your trade log and the reports included in your plan as CSV files.
• Delete everything by deleting your account in Settings.

Depending on where you live, you may have further rights, such as asking for a copy of your data or objecting to how it's used. To make a request, contact us at the contact address listed on this page (added before public launch). We'll answer within 30 days.

Children

TraderDx is for adults. We don't knowingly collect data from anyone under 18.

Changes to this policy

We'll update this page when what we collect or how we use it changes, and tell you in the app or by email before significant changes take effect.