Privacy Policy

1. Information We Collect

When you use TheTradeJournal, we collect the following types of information:

• Account Information: Your name, email address, and encrypted password when you create an account.
• Trade Data: Trade entries, notes, strategies, screenshots, reviews, and other content you voluntarily submit.
• Payment Information: Subscription and billing data processed securely through Stripe. We do not store your credit card details directly.
• Usage Data: Basic usage metrics such as feature usage counts for subscription enforcement.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and manage your subscription
• Send you important account notifications (e.g., password resets)
• Generate analytics and performance insights from your trade data
• Protect against unauthorized access and ensure security

3. Data Storage & Security

Your data is stored in secure, encrypted databases. Passwords are hashed using industry-standard bcrypt encryption. File uploads (such as chart screenshots) are stored in secure cloud storage with access controls. We implement security measures including rate limiting, input validation, and secure session management to protect your information.

4. Data Sharing

We do not sell, rent, or share your personal information or trading data with third parties, except in the following limited circumstances:

• Payment Processing: We share necessary billing information with Stripe to process payments.
• Legal Requirements: We may disclose information if required by law or in response to valid legal processes.
• Service Providers: We use cloud infrastructure providers to host the Service. These providers are contractually bound to protect your data.

5. Your Rights

You have the right to:

• Access: View all personal data associated with your account.
• Update: Modify your account information through the Settings page.
• Delete: Request deletion of your account and all associated data.
• Export: Download your trade data from the application.
• Withdraw Consent: Cancel your subscription and stop using the Service at any time.

6. Cookies & Local Storage

TheTradeJournal uses essential cookies for authentication and session management. We also use local storage for theme preferences and application state. We do not use tracking cookies or third-party advertising cookies.

7. Two-Factor Authentication

We offer optional two-factor authentication (2FA) using time-based one-time passwords (TOTP) to enhance account security. 2FA secrets are stored securely in encrypted form. Enabling 2FA is recommended for additional protection of your account.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal information and trade data within 30 days, except where we are required to retain it for legal or compliance purposes.

9. Children's Privacy

TheTradeJournal is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice within the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us through the Support section within the application.