Privacy Policy

1. Introduction

TradeEdge ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our trading journal platform.

2. Data We Collect

Account Information

• Email address
• Name (optional)
• Account preferences and settings

Trade Data

• Trade entries (instrument, direction, price, quantity, dates)
• Trade legs (for multi-leg options strategies)
• Notes, lessons, and trade screenshots you upload
• Emotions, setup quality, and behavioral annotations
• P&L calculations and performance metrics

Usage Analytics

• Pages visited and features used
• Session duration and frequency
• Device type, browser, and operating system
• IP address (anonymized for analytics)

AI Coaching Data

• AI coaching session history and responses
• Chat messages sent to the AI assistant
• Action items generated by AI coaching

3. How We Use Your Data

• Journal tracking: To store, display, and analyze your trade entries and performance metrics.
• AI coaching: To provide personalized trading insights and coaching based on your trade history. Your trade data is sent to OpenAI's API for analysis during coaching sessions only.
• Analytics: To generate performance reports, behavioral insights, and strategy analysis.
• Service improvement: To understand usage patterns and improve the platform.
• Communication: To send account-related emails (password resets, billing confirmations, critical updates).

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Supabase infrastructure. We employ the following security measures:

• Encryption at rest for all stored data
• Encryption in transit (TLS/HTTPS) for all data transfers
• Row Level Security (RLS) policies ensuring users can only access their own data
• Secure authentication via Supabase Auth with bcrypt password hashing
• Encrypted storage of broker OAuth tokens
• Regular security audits and monitoring

5. Data Sharing

We never sell your personal data or trade data to third parties.

We share data only with the following third-party services, solely for the purpose of providing the Service:

• Stripe — Payment processing. Receives billing information only. Subject to Stripe's Privacy Policy.
• OpenAI — AI coaching and chat. Receives anonymized trade summary data during coaching sessions. OpenAI does not use API data to train their models.
• Polygon.io / Databento — Market data providers. Receive symbol lookup queries only; no personal or trade data is shared.
• TastyTrade / Interactive Brokers — Broker connections (when enabled by you). OAuth-based connection for retrieving your own trade data and market quotes.

We may disclose your information if required by law, regulation, or legal process.

6. Your Rights

You have the following rights regarding your data:

• Access: You can view all data stored about you within the platform at any time.
• Export: You can export all of your trade data in CSV format at any time.
• Correction: You can edit or correct any trade data or account information.
• Deletion: You can request deletion of your account and all associated data. Deletion is completed within 30 days.
• Portability: You can request a complete export of all your data in a machine-readable format.

7. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis: We process your data based on your consent (account creation), contractual necessity (providing the Service), and legitimate interest (service improvement).
• Data transfers: Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for such transfers.
• Right to object: You may object to processing of your data for direct marketing purposes.
• Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority.
• Data Protection Officer: Contact us at privacy@tradeedge.app for GDPR-related inquiries.

8. CCPA Compliance (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request that we delete your personal information, subject to certain exceptions.
• Right to opt-out: We do not sell personal information. There is no need to opt out of sales.
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

9. Data Retention

• Active accounts: Your data is retained for as long as your account remains active.
• After cancellation: Trade data and account information are retained for 30 days after account closure, then permanently deleted.
• Billing records: Payment transaction records are retained for 7 years as required by tax and financial regulations.
• Usage analytics: Anonymized usage data may be retained indefinitely for service improvement.

10. Cookies

TradeEdge uses the following types of cookies:

• Essential cookies: Required for authentication and session management. Cannot be disabled.
• Analytics cookies: Used to understand how you interact with the platform. Can be declined via our cookie consent banner.
• Preference cookies: Store your settings like theme preference, date range filters, and dismissed banners.

You can manage cookie preferences through our cookie consent banner or your browser settings.

11. Market Data Redistribution

Market data displayed within TradeEdge is provided by third-party data vendors. This data is licensed for display within the TradeEdge application only. Users may not redistribute, resell, or commercially exploit market data obtained through the Service. Delayed and real-time data availability depends on your subscription tier and broker connections.

12. Children's Privacy

TradeEdge is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

14. Contact Information

For questions about this Privacy Policy or to exercise your data rights, contact us at privacy@tradeedge.app.

For general inquiries: support@tradeedge.app