Privacy Policy

[COMPANY LEGAL NAME], registration number [COMPANY REGISTRATION NUMBER], [REGISTERED ADDRESS], is the data controller for the personal data described here. Contact: [CONTACT EMAIL].

Account data. Your email address, and your name if you sign in through a provider that supplies one. This is held by our authentication provider, not in our own database — our records refer to you by an opaque account identifier.

Content you enter. The trades you record: instrument, direction, prices, size, stop and target levels, profit or loss, account balance if you enter one, and any notes you write about market context or your own state of mind.

Preferences. Your instrument watchlist and whether you asked for the morning email.

Billing data.If you subscribe, our payment processor holds your payment details; we never see or store a card number. We store the processor’s customer and subscription identifiers, the plan and its status.

Consent records. The fact that you accepted these documents, which version, and when.

Technical data. Server logs and error reports, which may contain an IP address and browser details. Error reports are configured to strip request bodies and identifying details before they are sent.

Product analytics. Counts of two actions — that a trade was recorded, and that a session brief was requested — attached to your account identifier. These carry no prices, sizes, balances or notes. Analytics run on the server only; no analytics or advertising script runs in your browser.

Only strictly necessary cookies are set: those our authentication provider uses to keep you signed in and to protect the sign-in process.

There are no advertising cookies, no third-party trackers and no cross-site profiling, which is why you are not asked to consent to any.

To provide the service — your account, your journal, your watchlist. Basis: performance of a contract with you.

To take payment and manage your subscription. Basis: performance of a contract.

To send the morning email, only if you switched it on. Basis: your consent, which you can withdraw at any time in Settings.

To keep the service working and secure — error reports, logs, abuse limits. Basis: our legitimate interest in a service that functions and is not abused.

To prove you accepted these terms. Basis: our legitimate interest in being able to establish and defend legal claims.

We use third-party providers for hosting, database, authentication, payments, email delivery, market data, error tracking, product analytics and the language model that generates written summaries. Each processes data only on our instructions.

Hosting, database, analytics and email delivery are configured in the European Union. Some providers are established outside the EU; where personal data reaches them, transfers rely on the European Commission’s standard contractual clauses.

The content of your trades is sent to the language model provider only when you ask for a review of a specific trade, and only that trade and your own aggregated history.

We do not sell personal data and we do not share it for advertising.

Account data, trades, watchlists and preferences: until you delete your account.

Consent records and records of payments: retained after account deletion where we are required to keep them or need them to establish or defend a legal claim.

Error reports and server logs: a short retention period set by the providers, typically weeks rather than years.

Stored market data snapshots: replaced continuously, kept at most 24 hours.

You can ask for a copy of your data, correction of it, deletion of it, restriction of how it is used, or portability of it. You can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting what was done beforehand.

Deleting your account deletes your data. When you delete your account through your account settings, the trades, watchlist, preferences and subscription records held against it are deleted automatically, except where they must be retained under section 6.

To exercise any right, write to [CONTACT EMAIL]. You also have the right to complain to the data protection authority in your country of residence.

When this policy changes materially, its version changes and you will be asked to review and accept it again before continuing to use the platform.