GDPR Compliance

Last updated: March 2026

TradeJournal is committed to protecting your data in compliance with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Brazilian General Data Protection Law (LGPD), and other applicable privacy regulations worldwide.

Your Data Rights

As a TradeJournal user, you have the right to:

  • Right to Access (Art. 15): View all personal data we store about you, directly in your Settings page.
  • Right to Rectification (Art. 16): Update or correct your personal information at any time.
  • Right to Erasure (Art. 17): Request permanent deletion of all your data. We implement a 30-day grace period, then hard-purge everything — trades, AI reviews, preferences, consents.
  • Right to Data Portability (Art. 20): Export all your data in JSON or CSV format from Settings.
  • Right to Withdraw Consent (Art. 7): Revoke any consent (AI processing, marketing, etc.) at any time in Privacy Settings.
  • Right to Object (Art. 21): Object to processing of your data for specific purposes.

Lawful Basis for Processing

  • Contract performance: Processing your trade data to provide the journaling and analytics service you signed up for.
  • Explicit consent: AI analysis of your trade data (only with your opt-in, revocable anytime).
  • Legitimate interest: Service security, fraud prevention, and service improvement.

AI Processing (Art. 22)

Our AI behavioral analysis constitutes automated decision-making. This processing is based on your explicit consent, collected at registration and manageable in Privacy Settings. You may opt out at any time without affecting your use of core journaling features.

Data Transfers

Trade data sent to our AI provider (Anthropic) may be processed outside the EU. This transfer is covered by Standard Contractual Clauses (SCCs) and Anthropic's data processing commitments. No data is used for AI model training.

CCPA Rights (California Residents)

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of the sale of personal information
  • Right to non-discrimination for exercising your rights

We do not sell personal information. You can manage your "Do Not Sell My Data" preference in Privacy Settings.

Data Protection Officer

For data protection inquiries or to exercise your rights, contact our DPO at privacy@tradejournal.app.

Consent Audit Trail

We maintain a complete audit trail of all consent grants and revocations, including timestamps, IP addresses, and policy versions. This trail is available to you in your Privacy Settings and can be exported.