Privacy Policy

TradeMind ("TradeMind," "we," "us," or "our") provides a trading journal and analytics platform that helps traders log trades, connect broker accounts, review performance, and get AI-powered trade analysis. This Privacy Policy explains what information we collect, how we use it, and the choices available to you when you use our website and application (the "Service").

By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this policy. If you do not agree with any part of this policy, please do not use the Service.

We collect the following categories of information:

• Account information — your email address and password when you sign up, managed through Supabase Authentication.
• Trade data — instrument, direction, entry/exit prices, position size, stop loss, take profit, strategy, notes, and any screenshots you upload, whether entered manually or imported from a connected broker.
• Broker connection data — when you connect a supported broker, we store the account identifiers and encrypted authorization tokens needed to sync your trade history.
• Subscription and billing data — your plan, subscription status, and Stripe customer/subscription identifiers. Payment card details are collected and stored directly by Stripe, not by us.
• Usage information — basic technical data such as browser type and pages accessed, used to operate and maintain the Service.

We use the information we collect to:

• Provide the journal, analytics, calendar, and backtesting features of the Service.
• Sync and display trade history from broker accounts you choose to connect.
• Generate AI-powered insights and coaching based on your own logged trade data.
• Process subscription payments and manage your billing status through Stripe.
• Send service-related communications, such as confirmations and account notices.
• Maintain the security, reliability, and performance of the Service.

We do not sell your personal information, and we do not use your trade data to train third-party AI models.

TradeMind uses essential cookies and browser local storage to keep you signed in and to remember basic preferences, such as your Supabase Authentication session. These are necessary for the Service to function and cannot be disabled without affecting your ability to log in.

We do not currently use third-party advertising or cross-site tracking cookies. If that changes in the future, we will update this policy and provide appropriate notice.

Sign-up and sign-in are handled by Supabase Authentication. Your password is processed and stored by Supabase using industry-standard hashing — TradeMind does not store your password in plain text or have direct access to it. Session tokens issued by Supabase are used to authenticate your requests to the Service.

TradeMind supports connecting supported broker accounts (currently Tradovate) via OAuth so you can automatically import your trade history instead of logging every trade by hand. When you connect a broker:

• Authorization tokens are encrypted before being stored.
• We only request the access needed to read your account and trade history.
• You can disconnect a broker at any time from the Brokers page, which removes the stored connection.

Broker connections are entirely optional. You can use TradeMind's manual trade journal without ever connecting a broker account.

Subscription payments are processed by Stripe, a PCI-compliant payment processor. When you subscribe to a paid plan, your payment details are entered directly into Stripe's checkout flow — TradeMind never receives or stores your full card number.

We store the minimum billing information needed to manage your subscription, such as your plan name, subscription status, and Stripe customer and subscription identifiers. Stripe's own privacy policy governs how Stripe handles your payment information.

TradeMind's AI Coach analyzes the trade data already in your own account — entries, exits, results, strategies, and notes you've logged — to surface patterns, generate performance summaries, and offer suggestions intended to help you improve. This analysis runs as part of our own application logic over your existing data.

AI-generated insights are informational and educational in nature. They are not financial advice, and TradeMind does not execute trades or make trading decisions on your behalf based on AI output.

Your account, trade, and subscription data is stored in a Supabase-hosted Postgres database. Uploaded screenshots are stored using Supabase Storage. The application itself is deployed on cloud hosting infrastructure (such as Vercel or Netlify), which serves the website and runs the application's server-side functions.

Data is generally stored on infrastructure located in the regions provided by these service providers, which may not be the same country you access the Service from.

We take a number of steps to protect your information, including:

• Encrypting broker authorization tokens before they are stored.
• Using Row Level Security so that database queries only ever return your own data.
• Encrypting data in transit between your browser and our servers using HTTPS.
• Restricting administrative access to a small number of authorized accounts.

No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your data, we will notify you as required by applicable law.

Depending on where you live, you may have rights regarding your personal information, including the right to:

• Request access to the personal information we hold about you.
• Request that we correct inaccurate information.
• Request that we delete your account and associated data.
• Object to or request that we limit certain uses of your information.

To exercise any of these rights, contact us using the details in the Contact section below.

You can request deletion of your account and associated data at any time by contacting us. Once we verify your request, we will delete your account data within a reasonable period, except for information we are required to retain for legitimate business, legal, or tax purposes — for example, billing records that Stripe retains as part of payment processing.

TradeMind is not directed at, and is not intended for use by, individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

TradeMind relies on the following categories of third-party service providers to operate:

• Supabase — authentication, database, and file storage.
• Stripe — subscription billing and payment processing.
• Hosting providers (such as Vercel or Netlify) — application hosting and delivery.
• Broker APIs (such as Tradovate) — trade history sync, only when you choose to connect an account.

Each of these providers processes data under its own privacy policy and terms, in addition to the practices described here.

We may update this Privacy Policy from time to time to reflect changes to the Service or applicable law. We will update the "last updated" date at the top of this page, and for material changes we will provide reasonable additional notice, such as an in-app notification or email.

If you have questions about this Privacy Policy or how your information is handled, contact us at andreorishea@icloud.com.