Privacy Policy

TradeLogist ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading journal platform and related services (collectively, the "Service").

By accessing or using TradeLogist, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

1.1 Information You Provide Directly

We collect information you voluntarily provide when using our Service:

1.2 Information from Third-Party Services

When you connect third-party services, we may receive:

• OAuth Providers (Google, GitHub): Basic profile information (name, email, profile picture) when you sign in with social accounts
• Broker Integrations: Trade history and account information when you connect supported brokers (Interactive Brokers, TD Ameritrade, Schwab, Alpaca, Coinbase, etc.)
• Payment Processor (Stripe): Transaction history and subscription status

1.3 Information Collected Automatically

When you access our Service, we automatically collect:

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, click patterns, session duration
• Log Data: IP address, access times, referring URLs
• Cookies and Similar Technologies: Session cookies, authentication tokens, preferences

We use the information we collect for the following purposes:

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service you requested (e.g., managing your account, processing trades)
• Legitimate Interests: Processing for our legitimate business interests (e.g., improving the Service, preventing fraud), balanced against your privacy rights
• Consent: Processing based on your explicit consent (e.g., marketing communications, optional analytics)
• Legal Obligation: Processing required to comply with applicable laws and regulations

4. Data Sharing and Third Parties

We may share your information only in the following circumstances:

4.1 Service Providers

We engage trusted third-party companies to perform services on our behalf:

• Stripe: Payment processing and subscription management
• Cloud Infrastructure: Data storage and hosting services
• Email Services: Transactional and marketing email delivery
• Analytics Providers: Usage analytics (anonymized where possible)

4.2 Broker Integrations

When you connect a brokerage account, we exchange data with that broker solely to import your trade history. We only access the minimum data necessary and do not execute trades or modify your brokerage account.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have.

We implement industry-standard security measures to protect your data:

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you of any breach affecting your data as required by law.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Active Accounts: Your data is retained while your account remains active
• Closed Accounts: We retain data for up to 30 days after account deletion to allow recovery, then permanently delete it
• Legal Requirements: Certain data may be retained longer if required by law (e.g., financial records for tax purposes)
• Aggregated Data: Anonymized, aggregated statistics may be retained indefinitely for analytics

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, please contact us at [email protected] or use the data export/deletion features in your account settings. We will respond within 30 days.

TradeLogist operates globally, and your data may be transferred to and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all service providers
• Compliance with applicable data protection frameworks

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

9.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect the functionality of the Service. Most browsers allow you to:

• View and delete existing cookies
• Block third-party cookies
• Block cookies from specific sites
• Block all cookies

10. Children's Privacy

TradeLogist is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us immediately.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information (subject to exceptions)
• Right to Opt-Out: Opt out of the "sale" of personal information (we do not sell your data)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

To submit a CCPA request, email us at [email protected] with the subject line "CCPA Request."

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or in-app notification for significant changes
• Provide a summary of key changes where appropriate

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please visit our Contact Us page.

For users in the European Union, you also have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.