Privacy Policy

1. What we collect

• Account details: email, name, password (hashed by Supabase Auth).
• Journal data you enter: trades, notes, setups, accounts, risk rules.
• Billing: handled by Stripe; we store plan status and customer id, not full card numbers.
• Optional newsletter email if you opt in.
• Technical logs: IP, browser, approximate location (hosting/CDN).

2. How we use data

• Provide the trading journal and related features.
• Send transactional emails (confirm signup, billing).
• Send the newsletter only if you opted in.
• Improve reliability and prevent abuse.
• Show ads on the free tier (may use cookies from ad partners).

3. Legal bases (UK GDPR)

Contract (to run your account), legitimate interests (security, product improvement), and consent (newsletter, non-essential cookies).

4. Processors

• Supabase — auth and database
• Vercel — hosting
• Stripe — payments
• Resend (or similar) — email
• Twelve Data / public calendar feeds — market & event data

5. Retention & deletion

We keep account and journal data while your account is active. You may request deletion by emailing hello@tradefalcon.co.uk. Backups may persist for a limited period.

6. Your rights

Under UK GDPR you can request access, correction, deletion, restriction, portability, and object to certain processing. Contact us to exercise these rights.

7. Contact

Email hello@tradefalcon.co.uk. See also our Terms and Risk Disclaimer.