Privacy Policy

TradeDeck LLC (“we”, “us”, “our”) operates the TradeDeck. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

Information you provide:

• Account information: name, email address, password (hashed, never stored in plain text)
• Trade data: trades you import or manually enter, including ticker symbols, prices, dates, and notes
• User settings: account size, commission preferences, timezone
• Setup answers (iOS app): if you answer the setup questions, such as what you trade, when you trade, what costs you the most and your goal, we save your answers with your account to set up your plan and to tailor Prep and Ollie. Money is asked only as a range, never an amount. You can see and change your answers in Settings.
• Communication: messages you send to our support team

Information collected automatically:

• Usage data: pages visited, features used, time spent in the app, and the upgrade prompts you see. This is linked to your account so we can understand how members use TradeDeck.
• Device information: browser type, operating system, screen resolution
• IP address and approximate location (country/region level)
• Cookies and similar technologies for session management and analytics
• How you found us: the campaign tags of the link you arrived from (for example utm_source), the referring website's domain and the first page you visited. If you create an account, this is saved with your account, along with how you signed up (email, Apple, Google or Discord) and whether you used the website or the iOS app. If you buy a membership before creating an account, we note that the account came from checkout.
• Push notification token (mobile app): if you turn on notifications in the app, we store the device token Apple issues, linked to your account, to deliver the alerts you choose. Turning notifications off or deleting your account removes it.
• Camera and photo library (mobile app): with your permission, photos you take or choose in the app are used only to import trades or attach screenshots to a trade.

Information from third parties:

• Social login: if you sign in with Apple, Google or Discord, we receive the name and email the provider shares. Apple may provide a private relay address; Google and Discord may also share your profile picture.
• Whop: your membership status and payment events (plan, amount and dates), used to manage access and to see which campaigns lead to memberships.
• Trade screenshots: images submitted through Snap Trade are processed by our AI partner for data extraction and are not stored permanently after processing. Screenshots you attach to a trade are stored with your account until you remove them, delete the trade, or delete your account. Removing one copied trade preserves screenshots still attached to another trade. Account deletion includes scheduled cleanup for files left by interrupted uploads.

Email Communications

When you create an account, we collect your email address to send account-related communications. This includes transactional emails (password resets, account confirmations), weekly trading recap summaries, onboarding guidance for new users, and occasional product updates. You may opt out of non-transactional emails at any time by clicking the unsubscribe link in any email or adjusting your preferences in Settings. Transactional emails related to account security cannot be opted out of.

We use your information to:

• Provide and maintain the Service
• Compute your trading analytics and statistics
• Enable trade import from connected brokers
• Send account-related notifications (password resets, billing, security alerts)
• Improve the Service and our membership offers based on how members use it
• Respond to support requests

We do not sell your personal information to third parties. We do not use your trade data for advertising or marketing purposes. We do not share your individual trade data with other users, except coaches you grant access to.

• All data is stored in secure, encrypted databases (Supabase/PostgreSQL with AES-256 encryption at rest)
• All data transmission uses TLS 1.3 encryption
• Row-level security ensures users can only access their own data
• Broker OAuth tokens are encrypted and stored separately from user data
• We never store brokerage passwords or login credentials
• Regular security audits and monitoring
• Access to production data is restricted to essential personnel only

• Your data is retained as long as your account is active
• Ollie's notes (short notes Ollie keeps between chats about your goals and what you are working on) are kept until you clear them in Settings under AI & Privacy or delete your account
• If you delete your account, all personal data and trade data is permanently deleted within 30 days
• Anonymized, aggregated analytics data may be retained for service improvement
• Backup data is purged on the same 30-day schedule
• API tokens and connected apps: TradeDeck records when each token or connected app was last used and, for each request, which endpoint was called, the result and how long it took. Request records never include the data returned and are kept for up to 2 days. When an app saves a plan, payout, expense or weekly review with an Idempotency-Key, TradeDeck also keeps a copy of what was saved, so a retry gets the same answer instead of saving it twice. A key is honored for 24 hours. These copies are kept for up to 2 days and are deleted with your data or your account. Your tokens and connected apps are deleted with your account.

You have the right to:

• Access all data we hold about you
• Export your data at any time (CSV export available in Settings)
• Correct inaccurate data
• Delete your account and all associated data
• Disconnect broker accounts and revoke OAuth access at any time
• Opt out of non-essential communications

For users in the European Union, these rights are provided in accordance with the General Data Protection Regulation (GDPR). You also have the right to lodge a complaint with your local data protection supervisory authority.

We use essential cookies for:

• Session management (keeping you logged in)
• Security (CSRF protection)

When you arrive from a link with campaign tags or from another website, we also set two first-party cookies that record those tags, the referring site's domain, the page you landed on and the time. They hold no name, email or device identifier, are not shared with third parties, and expire after 90 days. If you create an account, we save this with your account so we can see which posts and campaigns bring members. The iOS app does not set them.

On the sign-up and log-in screens, on the web and in the app, we keep a random install ID on your device, in local storage and a first-party cookie. It is made up when first needed, is not taken from your device, and holds no name or email. With it we count the steps before an account exists, such as opening the app, viewing the sign-up screen, the sign-in method you picked and the reason a sign-up was refused, so we can fix the places where people get stuck. When you sign up or log in, those steps are linked to your account. They are not shared with third parties and are deleted after 180 days.

We use Vercel analytics and performance measurements to understand how the Service is used. These tools are cookieless.

We use the following third-party services:

• Supabase (authentication & database): manages login/signup and stores your trade data securely
• Vercel (hosting): serves the application
• Whop (web payments & memberships): processes web subscription payments and manages membership access
• Apple and RevenueCat (in-app subscriptions): Apple processes App Store purchases. RevenueCat receives your TradeDeck account identifier and purchase information to validate purchases, restore subscriptions, and confirm access to paid features.
• Anthropic / Claude (AI processing): processes screenshots, trade history, financial figures, notes, Notebook entries, account and prop firm details, pre-trade plans, prop firm expenses and payouts, and messages for Snap Trade, Ollie (AI trading assistant, including his daily read), Pre-Trade Planner and coaching tools. Ollie reads only the parts of your journal a question needs. The personal AI tools ask for permission before sending data; you can cancel and continue using your journal, and turn AI features off in Settings under AI & Privacy. When a student enables AI coaching assistance, authorized coaches may use Claude, or an AI app they connect, to analyze their records, summarize sessions and draft feedback. Students can turn this off in Settings; new requests are then blocked, while data already sent cannot be recalled and in-progress provider processing may finish. Ordinary coaching remains available without AI. Access is restricted to coaches granted access to that student
• Resend (transactional email): sends account emails like password resets, confirmations, and notifications
• Apple and Google (authentication): optional sign-in with your Apple or Google account
• Discord (authentication): optional social login and account linking
• AssemblyAI (transcription): processes recordings submitted through the voice and transcription tools
• API tokens and connected apps: if you create a personal API token or connect an app, such as an AI assistant, in Settings, it can read the parts of your journal you allowed, and add to it if you allowed that, until you revoke it or it expires. What it reads goes to that app's provider under that provider's terms. When a student has AI coaching assistance on, a coach the student granted access to may also read that student's journal, read-only, through the coach's own token or connected app and the AI provider the coach chooses. The student's Ollie reads are not shared this way. Turning AI coaching assistance off blocks new requests; data already read cannot be recalled.

The Service is not intended for anyone under 18 years of age. We do not knowingly collect information from minors.

The Service is operated from the United States. If you access the Service from outside the US, your data may be transferred to and processed in the United States.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

For privacy-related questions or requests:

Email: support@tradedeck.io

TradeDeck LLC