This Privacy Policy describes the information that Trade Journal (the, the "Service") collect, how that information is processed, and the third-party services we use. This policy is based on the actual architecture of the Service and is intended to be accurate. It does not claim to collect information we do not collect, nor does it claim we do not collect information that we do.
1. Information We Collect
Account Information
- Email address and display name provided during registration
- Platform role (e.g., free, basic, pro, diamond, admin) used to determine feature access
Subscription and Payment Information
- Subscription status and plan tier
- Whop user identifiers and membership metadata used to verify entitlements
- Billing status (active, cancelled, past-due) — we do not store full card numbers; payment processing is handled by Whop and its payment infrastructure
Trade Journal Data
- Trade records: symbol, direction, entry/exit prices, position size, P&L, notes, emotions, strategy, timeframe, screenshots
- Journal entries: titles, content, mood, lessons, goals
- Account configurations: account names, balances, prop-firm details, goals, habits, daily bias, pre-trade plans, rules, mistakes, awards, withdrawals
AI Interactions
- Prompts and inputs you submit to AI-powered features (AI Coach, AI Review, AI Risk Planner, Psychology, and similar tools)
- AI-generated responses returned to you
Uploaded Files
- Screenshots and images you upload (stored via file-storage infrastructure; trade screenshots are stored as URLs associated with your records)
Usage and Security Logs
- Analytics events (e.g., feature usage tracking) collected through the platform analytics system
- Authentication and security logs used to protect account integrity
Device and Browser Information
- Standard technical information transmitted by your browser (IP address, browser type, operating system) as part of normal web requests
Cookies and Session Tokens
- Authentication tokens and session cookies used to keep you logged in and maintain security
2. Third-Party Processors and Services
We use the following categories of third-party services to operate the Service:
- Payment processing: Whop and its payment infrastructure handle subscription billing and payment data. Whop's own privacy and buyer terms apply to payment information.
- AI providers: AI-powered features use third-party AI model providers to generate responses to your prompts.
- Notification services: Discord webhooks may be used to send automated trade-alert notifications where you or an administrator has configured them.
- Hosting and infrastructure: The Service is hosted on cloud infrastructure providers that process data as needed to deliver the Service.
Each third-party processor is responsible for its own data practices under its respective privacy policy.
3. How We Use Your Information
- To provide, maintain, and improve the Service and its features
- To authenticate you and maintain account security
- To verify subscription status and determine feature entitlements
- To process payments and manage subscriptions through Whop
- To generate AI responses to your prompts
- To send notifications you or an administrator have configured (e.g., Discord trade alerts)
- To analyze usage patterns and improve product quality
- To detect, prevent, and address fraud, abuse, and security issues
4. Data Storage and Retention
Your Trade Journal data is stored in the Service's database and is associated with your account. We retain your data for as long as your account is active and as needed to provide the Service. Cancellation of a paid subscription does not delete your stored Trade Journal data; your account falls back to the Free plan and your data remains accessible according to the Free plan's feature set.
5. Information Sharing
We do not sell your personal information. We share information only as described in this policy or as needed to operate the Service:
- With third-party processors described above, as needed to deliver features
- To comply with legal obligations or respond to lawful requests
- To protect the rights, property, or safety of the Service and its users
6. Security
We use reasonable technical and organizational measures to protect your information. No system is perfectly secure, and we cannot guarantee absolute security. Two-factor authentication is available and recommended where offered.
7. Your Privacy Rights
Subject to applicable law, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data, subject to legal and operational limitations
- Object to or restrict certain processing of your data
- Withdraw consent where processing is based on consent
To exercise these rights, contact us through the Support page. We will respond according to applicable law.
8. Cookies
We use essential cookies and session tokens for authentication and security. We do not use cookies for third-party advertising tracking.
9. Children's Privacy
The Service is not directed to individuals under the age of majority in their jurisdiction. We do not knowingly collect information from minors. If you believe a minor has provided information, contact us and we will take appropriate steps to delete it.
10. International Data Transfers
Your information may be processed in countries other than your own, where data-protection laws may differ. By using the Service, you consent to such transfers in accordance with this Privacy Policy and applicable law.
11. Changes to This Policy
We may update this Privacy Policy at any time. Material changes will be communicated through the Service or by other reasonable means. The "Last Updated" date at the top of this document reflects the most recent revision.
For privacy questions or requests, contact us through the Support page.
End of Document