Privacy Policy

Effective: 2026-06-03  ·  Last updated: 2026-06-03

1. Who we are

This Privacy Policy applies to TRADECOACH ("we," "us," "TRADECOACH"), operator of the website at tradecoach.pro and the SaaS application accessible therein (the "Service").

Privacy questions can be sent to support@tradecoach.pro.

2. What we collect

2.1 Account information

• Email address (for login, transactional email, and support)
• Password, stored hashed (we never see your plaintext password)
• Display name and account preferences you set in the Service

2.2 Trading and journal data ("Your Content")

• Trade records you log or import: instrument, side, quantity, prices, fees, P&L, MAE/MFE, timestamps, tags, notes
• Journal entries: pre-market plans, hypotheses, end-of-day recaps, lessons
• Account configuration: prop firms, plans, rule settings, adjustments
• Pattern and exit-model definitions you create
• Screenshots, recordings, and dashboard snapshots you upload
• Review and goal data you author

2.3 Payment information

When you subscribe, our payment processor Polar Software Inc. collects your payment details. We receive only metadata sufficient to manage your subscription (status, plan, renewal date, billing email). We do not store your full payment card number, CVV, or bank account details.

2.4 Technical and usage data

When you use the Service we automatically collect:

• IP address (used for security, fraud prevention, and approximate geolocation)
• Browser type, operating system, screen size, language
• Pages viewed, features used, clicks, errors encountered
• Timestamps of activity

2.5 Communications

If you email support@tradecoach.pro or contact us through the Service, we keep the content of those messages so we can respond and improve support quality.

2.6 What we don't collect

• We don't collect or have access to your broker or prop firm credentials.
• We don't access your trading platform directly.
• We don't request government IDs or financial account numbers.
• We don't use third-party advertising cookies or ad-network trackers.

3. How we use it

We use the data we collect to:

• Provide the Service (display your data, run analytics, etc.);
• Authenticate you and secure your account;
• Process payments and manage subscriptions;
• Send transactional email (signup confirmation, payment receipts, trial-ending notices, security alerts);
• Provide customer support;
• Detect, prevent, and respond to fraud, abuse, and security incidents;
• Improve the Service through aggregated, anonymized analytics;
• Comply with legal obligations.

3.1 What we don't do with your data

• We don't sell, rent, or trade your personal information or Your Content to any third party.
• We don't use Your Content to train any AI model, whether ours or a third party's.
• We don't use behavioral profiling for advertising.

4. Service providers

We rely on a small number of infrastructure providers to operate the Service. Each provider has access only to the data they need to perform their function, and each is bound by contractual data protection terms.

Provider	What they do for us	Data they receive
Supabase	Database, authentication, file storage	Account credentials (hashed), Your Content, technical metadata
Cloudflare	Hosting, DNS, content delivery, email routing for inbound support email	IP addresses, request metadata, inbound email
Polar	Payment processing, merchant of record	Payment details, billing email, subscription status
Sentry	Error monitoring	Error stack traces, browser type, anonymized user identifier
PostHog	Product analytics	Feature usage events, anonymized user identifier, technical metadata
Resend	Outbound transactional email	Email address, message content
Anthropic (Premium tier, when applicable)	AI model inference	Trade context, journal text, pattern definitions, prompt content. Anthropic does not train its models on TRADECOACH user data per its commercial terms.
Discord (optional integrations)	Receive content you choose to post via webhook	Only content you explicitly choose to send via the integration

5. Data location and international transfers

Our primary database and file storage reside on Supabase infrastructure located in the United States (specifically, the U.S. East Ohio region). If you access the Service from outside the United States, you understand that your data will be transferred to, stored, and processed in the United States, which may have data protection laws different from those in your jurisdiction.

Where required by law (for example, under EU GDPR or UK GDPR), we rely on Standard Contractual Clauses or equivalent transfer mechanisms with our service providers.

6. Cookies and similar technologies

The Service uses the following categories of browser storage:

• Essential cookies / local storage for authentication, session management, and user preferences. The Service cannot function without these.
• Product analytics via PostHog. This is functional rather than advertising-related; it helps us understand which features are used and where users get stuck.

We do not use advertising cookies, retargeting pixels, or third-party advertising trackers.

7. Data retention

• Active accounts: we retain Your Content and account information for as long as your account is active.
• After subscription cancellation: we retain your data for 90 days to facilitate reactivation or data export, then delete it from primary systems.
• After account deletion request: we delete your data from primary systems within 30 days, and from backups within an additional 90 days.
• Legal holds: we may retain data longer if required by law, to resolve disputes, or to enforce our agreements.
• Aggregated, anonymized analytics derived from your usage (e.g., feature popularity counts) are not personally identifiable and may be retained indefinitely.

8. Your rights

Depending on where you live, you may have the following rights regarding your data:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to fix inaccurate or incomplete data.
• Deletion: request deletion of your data (subject to the retention rules in section 7).
• Portability: receive your data in a structured, machine-readable format (the Service's Export feature provides this for Your Content).
• Objection: object to certain processing based on legitimate interests.
• Withdraw consent: where we rely on consent (such as for non-essential analytics), withdraw it at any time.
• Lodge a complaint: with a data protection authority in your jurisdiction.

To exercise any of these rights, email support@tradecoach.pro. We will respond within 30 days. We may need to verify your identity before acting on the request.

9. Security

We take reasonable technical and organizational measures to protect your data, including:

• Encryption in transit (TLS 1.2 or higher) and at rest;
• Row-level security at the database level, isolating each user's data;
• Bucket-level access controls on file storage;
• Password hashing with industry-standard algorithms;
• Monitored error and security event logging;
• Principle of least privilege for internal access.

No system is perfectly secure. While we work to protect your data, we cannot guarantee absolute security. If we become aware of a security incident affecting your data, we will notify you in accordance with applicable law.

10. Children

The Service is not intended for or directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact support@tradecoach.pro and we will delete the information.

11. California residents (CCPA / CPRA)

California residents have specific rights under the California Consumer Privacy Act, as amended by the CPRA:

• The right to know what personal information we collect, use, disclose, and sell;
• The right to delete personal information we hold about you;
• The right to correct inaccurate personal information;
• The right to opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising;
• The right to non-discrimination for exercising these rights.

To exercise these rights, email support@tradecoach.pro.

12. EU/UK residents (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have rights under GDPR or equivalent law as described in section 8. We process your personal data under one or more of the following legal bases:

• Performance of a contract (providing the Service you subscribed to);
• Legitimate interests (improving the Service, preventing fraud, securing infrastructure);
• Consent (where you have given it for non-essential processing);
• Legal obligation (responding to lawful requests, tax records).

Our data controller is TRADECOACH. For privacy inquiries from EEA/UK residents, contact support@tradecoach.pro.

13. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email and/or via a prominent notice in the Service at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.

14. Contact

Privacy questions, rights requests, or concerns: email support@tradecoach.pro. We aim to respond within 5 business days for routine inquiries and within 30 days for formal rights requests.