Privacy Policy

Last updated: March 2026

1. Information We Collect

We collect information you provide when creating an account (name, email, password hash), trade data you import (CSV files, trade records), and usage data (pages visited, features used). We also collect consent records for compliance purposes.

2. How We Use Your Information

To provide and improve the TradeJournal service
To generate AI-powered trading insights (only with your explicit consent)
To communicate service updates and respond to support requests
To ensure security and prevent fraud

3. AI Data Processing

If you consent to AI analysis, your trade data is sent to our AI provider (Anthropic / Claude API) for behavioral analysis. This data is not used to train AI models. You can revoke AI processing consent at any time in your privacy settings.

4. Data Sharing

We do not sell your personal data. We share data only with: our AI provider (Anthropic, for trade analysis with your consent), our infrastructure providers (hosting, database), and when required by law.

5. Data Retention

Your data is retained as long as your account is active. When you delete your account, we soft-delete for 30 days (allowing recovery), then permanently purge all your data including trades, AI reviews, and personal information.

6. Your Rights

Access: View all data we store about you in Settings
Export: Download your complete data in JSON or CSV format
Deletion: Request permanent deletion of all your data
Correction: Update your personal information at any time
Consent withdrawal: Revoke any consent at any time

7. Security

Passwords are hashed with bcrypt (cost factor 12). All connections use HTTPS. We implement rate limiting, input sanitization, and security headers (CSP, HSTS, X-Frame-Options). Your data is stored in encrypted databases.

8. Contact

For privacy-related inquiries, contact us at privacy@tradejournal.app.