Privacy Policy

Last Updated: September 17, 2026

Version: 2026-09-17-v3

1. Introduction

This Privacy Policy describes how TRADEINSIGHTS JOURNAL LTD ("we", "us", "our", or "TradeInsights") collects, uses, discloses, and protects personal information when you use our trading analytics platform (the "Service").

By using the Service, you consent to the practices described in this policy. This policy applies to all users worldwide, with additional rights for residents of the EU/EEA, UK, and California.

2. Information We Collect

2a. Information You Provide

  • Account data: name, email address, username, and password (hashed — never stored in plain text).
  • Profile information: trading preferences, experience level, profile picture.
  • Payment information: processed by our third-party payment processor (Stripe). We do NOT store full credit card numbers or payment card data.
  • Broker API credentials: OAuth tokens or read-only API keys for broker integrations that you provide.
  • Trade data: trades you manually enter or import from connected brokerages.
  • Support communications: emails, support tickets, chat messages, and feedback you send us.

2b. Information Collected Automatically

  • Usage data: features used, pages visited, actions taken, session duration.
  • Device information: device type, operating system, browser type, screen resolution.
  • Log data: IP address, access times, referring URLs, error logs.
  • Cookies and similar technologies: see Section 9 and our Cookie Policy.
  • Local storage data: we store non-sensitive preferences in your browser's local storage, including display settings, onboarding state, dismissed notification flags, and daily loss limit settings. This data is stored locally on your device and is not transmitted to our servers.
  • Analytics data collected via third-party analytics providers (where you have consented).

2c. Information from Third Parties

  • Trade data imported from connected brokerages (trades, positions, transaction history).
  • Google account and profile information if you choose Google Sign-In, as detailed below.

Google Sign-In and Google User Data

Google Sign-In is an optional way to create or access your TradeInsights account. This section explains how TRADEINSIGHTS JOURNAL LTD handles information received from Google, including when you link Google to an existing account.

Information we access and store

We request Google's basic profile and email permissions. Google supplies your Google account identifier, email address, display name, and profile-picture URL where available. We store these account fields and generate a TradeInsights username when creating an account. We use the Google identifier or email address to recognise or link an existing account.

We do not request access to Gmail messages, Google Drive files, Google Calendar, or Google Contacts. We never receive your Google password. Google's access token is used during sign-in to retrieve the authorised profile; our application does not store Google access or refresh tokens for ongoing access. TradeInsights session credentials are separate from Google tokens.

How we use the information

We use this information to create, link, and authenticate your account, display your profile, maintain account security, provide support, and deliver account and service communications. Your account email may also be used for subscription billing and optional product communications subject to your communication preferences. Signing in with Google does not grant access to your brokerage accounts; those connections require separate setup.

Service providers and other disclosures

Our hosting and database providers, including Railway and Neon, process stored account information to operate the Service. Our email provider, Loops, processes account email and name information to deliver service communications. When you choose a paid subscription, payment providers such as Stripe process the account information needed for billing. Authorised personnel may access information when needed to provide support, maintain security, or meet legal obligations. Section 4 describes other applicable disclosures.

We do not sell Google user data. We exclude email addresses for Google-created and Google-linked accounts from our server-side advertising conversion payloads. Optional cookie-based measurement is separate from Google Sign-In and is described in Section 9. We do not request Google Workspace content for AI features or use Google Sign-In data to train general-purpose AI models. Our handling of Google API data is governed by the Google API Services User Data Policy, including applicable Limited Use requirements.

Protection and retention

Google account information is protected using the security measures in Section 6, including encrypted transport and access restrictions. Stored Google account fields remain part of your TradeInsights account while it is active and are subject to the retention and deletion terms in Section 7. Revoking Google access does not itself delete records already stored by TradeInsights.

Revoking access and requesting deletion

You can remove the TradeInsights connection in your Google Account connections settings. To delete your TradeInsights account, use Delete Account in Settings. You can also request access, correction, or deletion of your stored Google account information by emailing [email protected]. If you cannot sign in after revoking access, contact us using that address. Deletion is subject to the retention exceptions in Section 7.

3. How We Use Your Information

  • Provide, maintain, and improve the Service.
  • Process and display your trade data, analytics, and reports.
  • Generate AI-powered insights and performance analytics.
  • Process payments and manage subscriptions.
  • Send transactional emails (account confirmation, password reset, billing).
  • Send optional marketing communications (with consent; opt-out available at any time).
  • Monitor and analyse usage trends to improve the Platform.
  • Detect, prevent, and address technical issues and security threats.
  • Comply with legal obligations.

Regarding AI Training

We do NOT use your personal trade data to train our AI models. AI insights are generated using your individual data in real-time and are not retained for model training purposes. We may use aggregated, anonymised data (which cannot identify you) to improve service quality.

4. How We Share Your Information

We do not sell your personal information. We may share information in the following limited circumstances:

  • Service Providers: Payment processors, cloud hosting, analytics services, email delivery — solely to perform services on our behalf and bound by confidentiality obligations.
  • AI Processing Partners: When you use AI-powered features (Sage evidence review, Trade Analyst, Behavioral Alerts), relevant portions of your trade data are transmitted to our AI providers — Anthropic, Inc. and/or OpenAI, LLC — to generate your requested analysis. See Section 5 for full details.
  • Broker Integration Partners: MT4/MT5 connections are handled via MetaAPI (metaapi.cloud). Stock and ETF connections are handled via SnapTrade. These providers receive only the access credentials and account identifiers necessary to sync your trade history.
  • Broker Integrations: Data flows between TradeInsights and connected brokerages as authorised by you.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets. You will be notified of any such change.
  • With Your Consent: When you have given explicit consent for a specific sharing purpose.
  • Aggregated Data: We may share anonymised, aggregated data that cannot identify individual users.

5. AI Data Processing & Third-Party Processors

When you use AI-powered features on the platform, your trade data is processed by third-party AI providers to generate responses. By using AI features, you consent to this processing.

Anthropic, Inc.

We use Anthropic's Claude models to power SageAI. Trade summaries and your questions are sent to Anthropic's API to generate responses. Anthropic's data processing is governed by their Privacy Policy. Anthropic does not use API inputs to train their models by default.

OpenAI, LLC

We may use OpenAI's GPT models as a fallback AI provider. OpenAI's data processing is governed by their Privacy Policy. OpenAI does not use API inputs to train their models by default.

What data is sent to AI providers

  • Summarised trade statistics (win rate, P&L, symbols traded, timing patterns)
  • Your typed questions or prompts
  • Conversation history within the current session

We do not send raw personal identifiers (your name, email, or account number) to AI providers. We do not use your data to fine-tune or train AI models.

Service providers include Stripe (payments), Railway (application hosting), Neon (database hosting), Loops (email delivery), MetaAPI (MT4/MT5 broker connections), SnapTrade (stock broker connections), Anthropic (AI), and OpenAI (AI fallback). We will update these disclosures when providers change.

6. Data Security

  • We use industry-standard security measures including encryption in transit (TLS/SSL) and at rest.
  • Broker API tokens are encrypted and stored securely.
  • Access to user data is restricted to authorised personnel on a need-to-know basis.
  • Passwords are hashed using a secure cryptographic algorithm and are never stored in plain text.
  • Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
  • In the event of a personal-data incident, we will assess regulatory and user-notification duties and provide notices within the timeframes required by the applicable law and the facts of the incident.

7. Data Retention

  • Active account data is retained for the duration of your account.
  • After an account deletion request: personal data is deleted within 30 days, except where retention is required by law (e.g., financial records, tax compliance).
  • Backup copies may persist for up to 90 days after deletion.
  • Aggregated, anonymised data may be retained indefinitely for analytical purposes.
  • Payment records are retained as required by tax and financial regulations.

8. Your Rights

All Users

  • Access: Request a copy of your personal data.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your personal data.
  • Data Export: Request a portable copy of your data (available in Settings).
  • Opt-out: Unsubscribe from marketing communications at any time.
  • Withdraw Consent: Withdraw previously given consent at any time.

EU/EEA/UK Residents (GDPR)

  • Right to restrict processing.
  • Right to object to processing based on legitimate interests.
  • Right to data portability in machine-readable format.
  • Right to lodge a complaint with a supervisory authority.
  • Legal bases for processing: consent, contract performance, legitimate interests, legal obligations.
  • International transfers are protected by Standard Contractual Clauses or equivalent safeguards.

California Residents (CCPA/CPRA)

  • Right to know what personal information is collected, used, and shared.
  • Right to delete personal information.
  • Right to opt-out of the sale of personal information — we do not sell personal information.
  • Right to non-discrimination for exercising privacy rights.
  • To exercise any rights, contact [email protected].

9. Cookies, Local Storage & Tracking

We use cookies and similar technologies. See our Cookie Policy for full details. In summary:

  • Essential Cookies: Required for the Platform to function (session management, authentication, security). Always active.
  • Analytics Cookies: Used to understand usage patterns (e.g., Google Analytics). Only loaded with your consent.
  • Advertising measurement: Where permitted by your consent settings and applicable regional requirements, Google Ads and Meta may receive browser identifiers and conversion events such as a signup or purchase. This measurement is separate from the Google permissions requested for sign-in. Google-linked account email addresses are excluded from our server-side advertising email matching.
  • Preference Cookies: Store your settings and preferences. Only loaded with your consent.

You can control cookies through browser settings or by using our Cookie Settings option in the site footer. We honour Do Not Track (DNT) signals where feasible.

10. Children's Privacy

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected data from a child under 18, we will delete it promptly. Parents or guardians who believe their child has provided information to us should contact us at [email protected].

11. International Data Transfers

Data may be transferred to and processed in countries other than your country of residence. We implement appropriate safeguards (Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms) for international transfers. By using the Service, you consent to the transfer of your data to the United States.

12. Third-Party Links and Services

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access through the Platform.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on the Platform. Continued use of the Service after changes constitutes acceptance. We encourage you to review this policy regularly.

14. Web Push Notifications

If you opt in to browser ("Web Push") notifications, your browser generates a unique push subscription endpoint and a pair of cryptographic keys. We store this endpoint, the public keys, and your user agent string so that we can deliver notifications to your device.

  • Push notifications are strictly opt-in. We never trigger a permission prompt on page load — you must explicitly enable them in Settings → Notifications.
  • Notifications are delivered via your browser vendor's push service (e.g., Google FCM for Chrome, Mozilla Autopush for Firefox, Apple Push Notification service for Safari). The notification content is encrypted in transit using the keys generated by your browser.
  • We record aggregate engagement events (delivered, clicked, dismissed) per campaign for product analytics. Click events are tied to your account; we do not share them with third parties.
  • You can disable push notifications at any time by toggling the switch in Settings, by clicking the unsubscribe link contained in any notification, or by revoking notification permissions in your browser settings.
  • When you unsubscribe, we delete the push subscription record for your device within 30 days.

15. Contact Information

For privacy questions, data requests, or complaints:

TRADEINSIGHTS JOURNAL LTD

251 Little Falls Drive, Wilmington, DE 19808

Email: [email protected]

We will respond to requests within 30 days (or as required by applicable law).