Privacy Policy

TradeDeck LLC (“we”, “us”, “our”) operates the TradeDeck. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

Information you provide:

• Account information: name, email address, password (hashed, never stored in plain text)
• Trade data: trades you import or manually enter, including ticker symbols, prices, dates, and notes
• User settings: account size, commission preferences, timezone
• Communication: messages you send to our support team

Information collected automatically:

• Usage data: pages visited, features used, time spent in the app
• Device information: browser type, operating system, screen resolution
• IP address and approximate location (country/region level)
• Cookies and similar technologies for session management and analytics
• Push notification token (mobile app): if you turn on notifications in the app, we store the device token Apple issues, linked to your account, to deliver the alerts you choose. Turning notifications off or deleting your account removes it.
• Camera and photo library (mobile app): with your permission, photos you take or choose in the app are used only to import trades or attach screenshots to a trade.

Information from third parties:

• Social login: if you sign in with Apple, Google or Discord, we receive the name and email the provider shares. Apple may provide a private relay address; Google and Discord may also share your profile picture.
• Trade screenshots: images submitted through Snap Trade are processed by our AI partner for data extraction and are not stored permanently after processing. Screenshots you attach to a trade are stored with your account until you remove them, delete the trade, or delete your account. Removing one copied trade preserves screenshots still attached to another trade. Account deletion includes scheduled cleanup for files left by interrupted uploads.

Email Communications

When you create an account, we collect your email address to send account-related communications. This includes transactional emails (password resets, account confirmations), weekly trading recap summaries, onboarding guidance for new users, and occasional product updates. You may opt out of non-transactional emails at any time by clicking the unsubscribe link in any email or adjusting your preferences in Settings. Transactional emails related to account security cannot be opted out of.

We use your information to:

• Provide and maintain the Service
• Compute your trading analytics and statistics
• Enable trade import from connected brokers
• Send account-related notifications (password resets, billing, security alerts)
• Improve the Service based on usage patterns
• Respond to support requests

We do not sell your personal information to third parties. We do not use your trade data for advertising or marketing purposes. We do not share your individual trade data with other users.

• All data is stored in secure, encrypted databases (Supabase/PostgreSQL with AES-256 encryption at rest)
• All data transmission uses TLS 1.3 encryption
• Row-level security ensures users can only access their own data
• Broker OAuth tokens are encrypted and stored separately from user data
• We never store brokerage passwords or login credentials
• Regular security audits and monitoring
• Access to production data is restricted to essential personnel only

• Your data is retained as long as your account is active
• Ollie's notes (short notes Ollie keeps between chats about your goals and what you are working on) are kept until you clear them in Settings under AI & Privacy or delete your account
• If you delete your account, all personal data and trade data is permanently deleted within 30 days
• Anonymized, aggregated analytics data may be retained for service improvement
• Backup data is purged on the same 30-day schedule

You have the right to:

• Access all data we hold about you
• Export your data at any time (CSV export available in Settings)
• Correct inaccurate data
• Delete your account and all associated data
• Disconnect broker accounts and revoke OAuth access at any time
• Opt out of non-essential communications

For users in the European Union, these rights are provided in accordance with the General Data Protection Regulation (GDPR). You also have the right to lodge a complaint with your local data protection supervisory authority.

We use essential cookies for:

• Session management (keeping you logged in)
• Security (CSRF protection)

We use Vercel analytics and performance measurements to understand how the Service is used. These tools are cookieless.

We use the following third-party services:

• Supabase (authentication & database): manages login/signup and stores your trade data securely
• Vercel (hosting): serves the application
• Whop (payments & memberships): processes subscription payments and manages membership access
• Anthropic / Claude (AI processing): processes screenshots, trade history, financial figures, notes, Notebook entries, account and prop firm details, pre-trade plans, prop firm expenses and payouts, and messages for Snap Trade, Ollie (AI trading assistant, including his daily read), Pre-Trade Planner and coaching tools. Ollie reads only the parts of your journal a question needs. The personal AI tools ask for permission before sending data; you can cancel and continue using your journal, and turn AI features off in Settings under AI & Privacy. When a student enables AI coaching assistance, authorized coaches may use Claude to analyze their records, summarize sessions and draft feedback. Students can turn this off in Settings; new requests are then blocked, while data already sent cannot be recalled and in-progress provider processing may finish. Ordinary coaching remains available without AI. Access is restricted to coaches granted access to that student
• Resend (transactional email): sends account emails like password resets, confirmations, and notifications
• Apple and Google (authentication): optional sign-in with your Apple or Google account
• Discord (authentication): optional social login and account linking
• AssemblyAI (transcription): processes recordings submitted through the voice and transcription tools

The Service is not intended for anyone under 18 years of age. We do not knowingly collect information from minors.

The Service is operated from the United States. If you access the Service from outside the US, your data may be transferred to and processed in the United States.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

For privacy-related questions or requests:

Email: support@tradedeck.io

TradeDeck LLC