Privacy policy
Updated
On this page
Who we are
TradeStora is operated by Alex Langton, trading as TradeStora (a sole trader), of 4 Derby Road, Caversham, Reading, RG4 5EY, United Kingdom — the data controller for the personal data described below. Contact: support@tradestora.com.
The short version
We collect what you put into your journal and what we need to run your account. We don't sell your data or use it for advertising. Your screenshots are private to your account and are sent to our AI provider only to be read. You can export or delete everything yourself in Settings › Data.
What we collect
- Account: email address, name, password (stored hashed by our database provider), time zone, currency and your settings.
- Your journal: trades, fills, notes, tags, strategies, reviews, chart screenshots and what was read from them.
- Billing: your plan and its status. Card details go straight to Stripe; we never see or store them.
- Broker connections (Pro): an access token from your broker, stored encrypted, used only to fetch your trades.
- Usage: if you switch on "Share anonymous usage", which screens you use (never trade values, symbols or notes). Server logs with IP addresses are kept by our hosting provider for a short time to run and protect the service.
Why we use it
To run the journal you asked for (our contract with you), to take payment, to keep the service secure, and, only if you agree, to learn which features help. We send service emails (receipts, security, deletion); tips and offers only as you choose in Settings › Notifications.
Screenshots and AI
When you capture a chart, the image (and nothing else: no email, name or account id) is sent to OpenAI to be read. Under OpenAI's API terms, data sent through the API is not used to train their models by default, and they may keep it for up to 30 days for abuse monitoring. Remove account numbers or anything personal from a screenshot if you prefer; the AI only needs the chart.
Who processes data for us
| Provider | What for | Data | Where |
|---|---|---|---|
| Supabase | database, sign-in, file storage | everything you store | Ireland (EU) |
| Vercel | hosting, logs, page-view counts | requests, IP address, logs | EU and US |
| OpenAI | reading chart screenshots | screenshot images only | US |
| Stripe | payments and invoices | name, email, billing address, card | UK, EU and US |
| Resend | sending email | email address, name | US and EU |
| PostHog | product analytics, only if you opt in | which screens you use | EU |
| Sentry | error reports | technical error details, user id | EU |
Transfers outside the UK use the UK's adequacy regulations (EU) or the UK International Data Transfer Addendum or Data Privacy Framework (US), as each provider offers. We'll email you at least 30 days before adding a new provider that handles your personal data.
How long we keep it
| Data | Kept for |
|---|---|
| Your journal (trades, notes, screenshots) | while your account exists; deleted 7 days after you ask to delete your account |
| Capture key records | until revoked, then 90 days |
| Capture counters | 400 days |
| Uploaded import files | 30 days (the trades they created stay) |
| Broker sync logs | 90 days |
| Payment event records | 13 months (invoices stay with Stripe for UK tax law) |
| Read notifications | 90 days |
| Messages to support | 2 years |
| Data export files | 7 days |
| Backups | deleted data is gone from backups within 35 days |
Analytics
Product analytics (PostHog, EU) run only if you switch on "Share anonymous usage" in Settings › Notifications or during setup. They record which screens and buttons you use, never trade values, symbols, notes or screenshots. Switch it off any time and nothing more is sent. Page-view counts on our public pages (Vercel) use no cookies and no personal identifiers.
Cookies
We only use cookies that keep you signed in and the service secure, so there's no cookie banner.
Your rights
- See and take your data: Settings › Data › Download my data.
- Correct it: edit your profile and trades any time.
- Delete it: Settings › Data › Delete my account (7 days to change your mind).
- Object or ask anything else: the contact form in Help, topic "Privacy request", or support@tradestora.com. We answer within 30 days.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).
Changes
If we change this policy in a way that matters, we'll tell you by email or in the app before it applies.