Privacy Policy

This Privacy Policy describes how TRADEINSIGHTS JOURNAL LTD ("we", "us", "our", or "TradeInsights") collects, uses, discloses, and protects personal information when you use our trading journal and analytics platform (the "Service").

By using the Service, you consent to the practices described in this policy. This policy applies to all users worldwide, with additional rights for residents of the EU/EEA, UK, and California.

• Provide, maintain, and improve the Service.
• Process and display your trade data, analytics, and reports.
• Generate AI-powered insights and performance analytics.
• Process payments and manage subscriptions.
• Send transactional emails (account confirmation, password reset, billing).
• Send optional marketing communications (with consent; opt-out available at any time).
• Monitor and analyse usage trends to improve the Platform.
• Detect, prevent, and address technical issues and security threats.
• Comply with legal obligations.

We do not sell your personal information. We may share information in the following limited circumstances:

• Service Providers: Payment processors, cloud hosting, analytics services, email delivery — solely to perform services on our behalf and bound by confidentiality obligations.
• AI Processing Partners: When you use AI-powered features (SageAI Coach, Trade Analyst, Behavioral Alerts), relevant portions of your trade data are transmitted to our AI providers — Anthropic, Inc. and/or OpenAI, LLC — to generate your requested insights. See Section 5 for full details.
• Broker Integration Partners: MT4/MT5 connections are handled via MetaAPI (metaapi.cloud). Stock and ETF connections are handled via SnapTrade. These providers receive only the access credentials and account identifiers necessary to sync your trade history.
• Broker Integrations: Data flows between TradeInsights and connected brokerages as authorised by you.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets. You will be notified of any such change.
• With Your Consent: When you have given explicit consent for a specific sharing purpose.
• Aggregated Data: We may share anonymised, aggregated data that cannot identify individual users.

When you use AI-powered features on the platform, your trade data is processed by third-party AI providers to generate responses. By using AI features, you consent to this processing.

Our complete list of sub-processors includes: Stripe (payments), Neon (database hosting), MetaAPI (MT4/MT5 broker connections), SnapTrade (stock broker connections), Anthropic (AI), OpenAI (AI fallback), and our email delivery providers. We will update this list when sub-processors change.

• We use industry-standard security measures including encryption in transit (TLS/SSL) and at rest.
• Broker API tokens are encrypted and stored securely.
• Access to user data is restricted to authorised personnel on a need-to-know basis.
• Passwords are hashed using a secure cryptographic algorithm and are never stored in plain text.
• Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
• In the event of a data breach affecting personal information, we will notify affected users and relevant authorities as required by applicable law: within 72 hours for EU/EEA/UK users (GDPR Art. 33), and within the timeframes required by other applicable laws for users in other jurisdictions.

• Active account data is retained for the duration of your account.
• After an account deletion request: personal data is deleted within 30 days, except where retention is required by law (e.g., financial records, tax compliance).
• Backup copies may persist for up to 90 days after deletion.
• Aggregated, anonymised data may be retained indefinitely for analytical purposes.
• Payment records are retained as required by tax and financial regulations.

We use cookies and similar technologies. See our Cookie Policy for full details. In summary:

• Essential Cookies: Required for the Platform to function (session management, authentication, security). Always active.
• Analytics Cookies: Used to understand usage patterns (e.g., Google Analytics). Only loaded with your consent.
• Preference Cookies: Store your settings and preferences. Only loaded with your consent.

You can control cookies through browser settings or by using our Cookie Settings option in the site footer. We honour Do Not Track (DNT) signals where feasible.

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected data from a child under 18, we will delete it promptly. Parents or guardians who believe their child has provided information to us should contact us at info@tradeinsights.io.

Data may be transferred to and processed in countries other than your country of residence. We implement appropriate safeguards (Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms) for international transfers. By using the Service, you consent to the transfer of your data to the United States.

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access through the Platform.

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on the Platform. Continued use of the Service after changes constitutes acceptance. We encourage you to review this policy regularly.

If you opt in to browser ("Web Push") notifications, your browser generates a unique push subscription endpoint and a pair of cryptographic keys. We store this endpoint, the public keys, and your user agent string so that we can deliver notifications to your device.

• Push notifications are strictly opt-in. We never trigger a permission prompt on page load — you must explicitly enable them in Settings → Notifications.
• Notifications are delivered via your browser vendor's push service (e.g., Google FCM for Chrome, Mozilla Autopush for Firefox, Apple Push Notification service for Safari). The notification content is encrypted in transit using the keys generated by your browser.
• We record aggregate engagement events (delivered, clicked, dismissed) per campaign for product analytics. Click events are tied to your account; we do not share them with third parties.
• You can disable push notifications at any time by toggling the switch in Settings, by clicking the unsubscribe link contained in any notification, or by revoking notification permissions in your browser settings.
• When you unsubscribe, we delete the push subscription record for your device within 30 days.

For privacy questions, data requests, or complaints: