Privacy Policy

Tradexa("we", "us", or "our") operates the trading journal application available at https://tradexa.app. This Privacy Policy explains what data we collect, why we collect it, how it is stored, and your rights over it.

By using Tradexa, you agree to the practices described in this policy. If you do not agree, please do not use the application.

Account information — When you register, we collect your name and email address, stored securely via Supabase Auth.

Trading & journal data— All trades, journal entries, performance notes, and account data you enter are stored in two places: your browser's local storage (on your device) for fast offline access, and our cloud database (Supabase) for backup and cross-device sync. This data is associated with your user account and accessible only to you.

Session data — We use cookies and browser storage to maintain your login session. These are functional cookies required to operate the application; we do not use advertising or tracking cookies.

Payment information— Payments are processed entirely by Stripe, Inc. We never receive or store your full card number, CVV, or bank details. We store only your Stripe customer ID and subscription status to manage your plan. Stripe's privacy policy governs payment data.

Support & feedback — If you contact support or submit feedback, we receive your name, email address, and the content of your message.

Usage data — We do not currently use third-party analytics, advertising trackers, or behavioral profiling tools.

We use collected data only to:

• Provide, operate, and maintain the Tradexa application
• Back up your trading data and enable cross-device sync
• Authenticate your identity and maintain your session
• Process payments and manage your subscription via Stripe
• Respond to support requests and feedback
• Send transactional emails (receipts, plan confirmations, password resets)
• Improve the product based on aggregate, non-identifiable feedback

We do not sell, rent, or share your personal data or trading data with third parties for marketing or advertising purposes.

Your data is stored in two locations:

• Your device (localStorage) — trade data, journals, and settings are cached in your browser for fast, offline-capable access. This data is cleared if you clear your browser storage.
• Supabase (cloud) — your data is synced to a cloud database hosted by Supabase, Inc. (infrastructure on AWS). This enables backup and multi-device access. Data is encrypted at rest and in transit.

We use industry-standard security practices including encrypted connections (HTTPS), row-level security on our database (each user can only access their own data), and server-side authentication verification. However, no system is 100% secure, and we cannot guarantee absolute security.

We recommend using a strong, unique password for your Tradexa account and enabling any available two-factor authentication.

We use the following third-party services to operate Tradexa:

• Supabase — authentication and cloud database. Your account credentials and trading data are stored on Supabase infrastructure. Supabase Privacy Policy.
• Stripe — payment processing and subscription management. Stripe Privacy Policy.
• Vercel — application hosting and serverless functions. Vercel Privacy Policy.
• Resend — transactional email delivery. Resend Privacy Policy.

We retain your data for as long as your account is active. If you delete your account, we will delete your data from our servers within 30 days, except:

• Payment and billing records, which we retain for 7 years as required by tax law
• Support communications, retained for up to 2 years
• Data we are required to retain by applicable law

Browser-cached data (localStorage) is under your control and can be cleared at any time through your browser settings or the data reset option in Settings.

Depending on where you live, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and all associated data
• Portability — request your data in a machine-readable format (CSV export available in Settings)
• Objection — object to processing of your data in certain circumstances
• Restriction — request we restrict processing of your data

To exercise any of these rights, contact us at quickemailassistant@gmail.com. We will respond within 30 days. We may need to verify your identity before processing your request.

California residents (CCPA): You have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information.

EU/EEA residents (GDPR): Our lawful basis for processing is contract performance (to provide the service you signed up for) and legitimate interests (security, fraud prevention). You have the right to lodge a complaint with your local data protection authority.

In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of becoming aware of the breach, consistent with applicable law. We will describe the nature of the breach, the data affected, and the steps we are taking to address it.

Tradexa is not directed at or intended for use by children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it promptly.

We may update this Privacy Policy as our practices change or as required by law. We will notify you of material changes by email or by displaying a notice in the application at least 14 days before the changes take effect. The "Effective date" at the top of this page will always reflect when the policy was last updated.

For privacy questions, data requests, or concerns about how we handle your information, contact us at:

quickemailassistant@gmail.com

We aim to respond to all privacy-related inquiries within 5 business days.