Privacy Policy
Last updated: May 21, 2026
This Privacy Policy explains what data TradeScope collects, why we collect it, and what choices you have. We try to keep this short and human — we are not interested in collecting more than we need to run the Service.
1. What we collect
Account data: email address, language preference, and authentication identifiers from sign-in providers (e.g., Google) when you choose to use them. Service data: the trades, notes, screenshots, and settings you create inside the Service. Usage data: technical telemetry such as IP address (hashed), device and browser, and product events that help us understand how the Service is used.
2. Why we collect it
To provide and improve the Service, to keep accounts secure, to communicate important updates, and to make product decisions. We do not sell your personal data. We do not run ad networks inside the Service.
3. Legal bases (GDPR)
Where applicable, we process personal data under the following legal bases: (a) performance of our contract with you (operating the Service); (b) our legitimate interest in keeping the Service secure and improving it; (c) your consent, where required; (d) legal obligations.
4. Where data is stored
We host the Service on infrastructure provided by Cloudflare and Supabase. Data is stored primarily in the European Union. Subprocessors may process data outside the EU under appropriate safeguards. A current list of subprocessors is available on request.
5. AI processing
When you use AI features, the relevant subset of your data (for example, a single closed trade) is sent to a third-party AI provider to generate insights. We do not send your full history, your identity, or your contact information beyond what is technically required. AI providers act as processors under our instructions and are contractually restricted from using your data to train their general models.
7. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact [email protected]. We will respond within the timeframes required by applicable law.
8. Data retention
We keep your data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is required for legal, accounting, or security reasons.
9. Security
We use industry-standard measures to protect your data: encryption in transit, encryption at rest, role-based access controls, and audited infrastructure providers. No system is perfectly secure. If a breach affects your data, we will notify you in accordance with applicable law.
10. Children
The Service is not directed to children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Changes
We may update this Privacy Policy. If changes are material, we will notify you in-app or by email before they take effect.
12. Contact
Privacy questions and data requests: [email protected].