Official Privacy Policy

TradeJournaly Privacy Policy

At TradeJournaly (accessible from https://tradejournaly.com), protecting your personal privacy and proprietary trading data is our foundational architectural commitment. This Privacy Policy outlines what information we collect, why we collect it, how we safeguard it, and your rights.

Effective Date: September 2026•Last Revised: September 28, 2026

Key Privacy Invariants at a Glance

Zero Broker Credentials: We never request, store, or require broker passwords, trading logins, or API keys.

No Data Selling: We never sell, monetize, rent, or trade your personal information or trading logs to any third party.

Row-Level Security (RLS): Your trades and accounts are encrypted and isolated so only you have access.

Instant Deletion: You can export or permanently delete your trading records and account at any time.

1.Information We Collect

We only collect information that is strictly necessary to provide you with secure user authentication, deterministic trading analytics, and journal management.

A. Account & Profile Information

When you register for an account (either via standard email signup or single sign-on authentication), we collect:

Your email address (used as your primary account identifier and for transactional notifications).
Your full name / display name.
Profile photo / avatar URL (when logging in with connected authentication providers).
Preferred base currency (e.g., USD, INR, EUR, GBP) and country selection.

B. User-Provided Trading Data & Screenshots

When you use the trading journal and telemetry features, you voluntarily upload or input:

Trade execution details (tickers/symbols, entry/exit prices, position sizes, stop-losses, take-profits, commissions, timestamps, and realized P&L).
Trading setup categories, mistake tags, and emotional tags.
Order and position screenshots uploaded for automated data extraction.
Prop firm and trading account risk parameters (account size, daily loss limit, max drawdown limits).

C. Technical & Diagnostic Telemetry

When accessing our website and Progressive Web App (PWA), standard server access logs may automatically record your IP address, browser type, operating system, and request timestamps strictly for cybersecurity rate limiting, error diagnosis, and DDoS mitigation.

2.How We Use Your Information

We use your data solely for the following explicit and lawful business purposes:

Providing Authentication & Security: Authenticating your identity, verifying email addresses, and protecting your trading data against unauthorized access.
Computing Trading Performance Analytics: Calculating your mathematical expectancy, win rate, profit factor, risk-to-reward metrics, and prop firm drawdown limits.
Behavioral Telemetry & Leak Detection: Running deterministic mathematical heuristics to alert you to revenge trading, stop-loss moving, or oversizing patterns.
Screenshot Vision Processing: Processing uploaded trade screenshots to extract numeric order values so you don't have to type them manually.
Transactional Email Communications: Dispatching essential transactional communications such as signup confirmations, password reset tokens, and security notices.
Customer Support: Responding to user inquiries, bug reports, and assistance requests.

3. Authentication & Limited Data Use Policy

When you choose to sign in to TradeJournaly using third-party authentication or single sign-on, TradeJournaly accesses only your basic identity profile details (openid, email, and profile scopes) necessary to securely establish and maintain your account.

Limited Data Use Commitment

TradeJournaly strictly adheres to the highest industry standards and limited use policies regarding authentication data. User data obtained through authentication protocols is never transferred or used beyond authenticating your login and securing your private profile.

Specifically, regarding your user and authentication data:

We do not use authentication data for advertising, marketing campaigns, or retargeting.
We do not sell, rent, or transfer user data to data brokers, ad networks, or commercial third parties.
We do not use your proprietary trading logs or personal data to train public machine learning or artificial intelligence models.
User data is utilized strictly and exclusively to authenticate your login, protect account security, and provide platform functionality.

4.Cloud Infrastructure & Security Architecture

We partner only with industry-leading enterprise cloud infrastructure providers that adhere to rigorous security, encryption, and compliance standards:

Enterprise Cloud Database

Database & Storage

Hosts encrypted databases, user authentication tokens, private screenshot storage, and strict cryptographic Row Level Security (RLS) enforcement.

Vision Recognition Engine

OCR & Extraction

Automated computer vision pipelines parse uploaded trade screenshots in-memory to populate entry fields, with zero permanent third-party retention.

Transactional Delivery System

Transactional Email

Delivers essential transactional verification emails, password recovery links, and security alerts from mail.tradejournaly.com.

Global Edge Network & Hosting

Hosting & CDN

Provides high-availability serverless web hosting, global edge routing, SSL/TLS encryption, and continuous DDoS protection.

5.Data Security & Protection Standards

We implement bank-grade security practices to ensure your information remains confidential and invulnerable to unauthorized access:

Encryption in Transit: All communications between your browser and our servers are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
Encryption at Rest: All database records and uploaded media files are encrypted at rest using industry-standard AES-256 encryption.
PostgreSQL Row Level Security (RLS): Every database query is cryptographically constrained to the authenticated user ID (auth.uid() = user_id), preventing cross-tenant data leakage.
Zero Broker Credentials: Because TradeJournaly never asks for broker passwords or API keys, your actual brokerage accounts are completely immune to compromise through our system.

6.Your Rights & Account Deletion

You retain complete ownership of your personal and trading data. You have the following rights at any time:

Right to Access & ExportView, inspect, and export your complete trade history and metrics from the journal terminal.

Right to RectifyEdit or update any incorrect trade values, account configurations, or profile details at will.

Right to Erasure (Delete)Permanently delete individual trades, screenshots, or your entire user account and associated data.

To request full account erasure or submit a privacy inquiry, you can delete your account from Account Settings or send an email request to [email protected]. Requests are processed within 48 business hours.

7.Cookies & Local Storage

TradeJournaly uses essential cookies and browser LocalStorage solely to maintain active login sessions, save your user interface preferences (such as dark mode and selected base currency), and detect PWA installation status. We do not use intrusive cross-site tracking cookies.

8.Children's Privacy

TradeJournaly is designed for individuals who are at least 18 years of age (or the age of majority in their jurisdiction). We do not knowingly collect or solicit personal information from minors. If we discover that personal information has been collected from a child, we will promptly delete it.

9.Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect product enhancements, security improvements, or regulatory updates. Any modifications will be posted directly to this URL (https://tradejournaly.com/privacy) with an updated revision date.

10. Contacting Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact our Data Protection Team:

Application: TradeJournaly

Domain: https://tradejournaly.com

Email: [email protected]

Location: Global Cloud Infrastructure