Privacy Policy

1. Introduction

Traders Journal ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our web application and related services (the "Service").

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Password (stored securely via hashing — we never store plaintext passwords)

Trade Data

Data you voluntarily enter into the Service, including:

• Trade entries (asset, prices, dates, P&L, notes)
• Journal entries and notes
• Strategy names and configurations
• Risk management settings
• Tags and categories
• Uploaded screenshots (Pro plan)

Payment Information

If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number, CVV, or full payment details. We receive only a Stripe customer ID and subscription status to manage your account.

Automatically Collected Information

We may collect standard web analytics data such as browser type, device type, and pages visited to improve the Service. We do not use third-party tracking or advertising cookies.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your trades and generate analytics and reports
• Manage your account and subscription
• Communicate with you about your account or the Service
• Respond to support requests
• Protect against fraud and unauthorized access

4. Data Storage and Security

Your data is stored securely using Supabase, which provides enterprise-grade infrastructure with:

• Encryption at rest and in transit (TLS/SSL)
• Row-level security policies ensuring you can only access your own data
• Regular automated backups
• SOC 2 Type II compliant infrastructure

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with:

• Supabase — database hosting and authentication
• Stripe — payment processing for paid subscriptions
• Vercel — application hosting

These providers are contractually bound to protect your data and use it only for the purposes of delivering their services to us.

6. Your Rights

You have the right to:

• Access your data at any time through the Service
• Export your data via CSV export or PDF reports
• Correct any inaccurate data by editing your trades and entries
• Delete your account and all associated data through the Settings page
• Withdraw consent by discontinuing use of the Service

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and trade records within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

8. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or third-party tracking cookies. No cookie consent banner is required as we only use strictly necessary cookies.

9. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect information from children. If we become aware that a user is under 18, we will take steps to delete their account and data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or a notice within the Service. The "Last updated" date at the top reflects the most recent revision.

11. Contact

If you have any questions about this Privacy Policy or your data, please contact us at support@tjournal.app