1. Who we are & data controller

Tradex Journal ("Tradex", "we", "us", or "our") operates the Tradex Journal platform — a web-based trading journal and performance analytics tool accessible at tradexj.com.

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable data protection laws, Tradex Journal is the data controller of personal information collected through the platform. Contact: privacy@tradexj.com.

2. Data we collect

Account & identity data

When you create an account we collect:

• Name and email address
• Password (stored as a hashed, salted value by our authentication provider — we never see or store your plaintext password)
• If you sign in with Google: your name, email address, and profile photo as shared by your Google account
• IP address (used for security; not retained beyond 90 days)
• Account ID and session tokens

Trading & journal data you provide

• Trade records you enter manually or import from CSV files (broker exports such as Tradovate or Rithmic)
• Journal entries, notes, and chart screenshots you attach
• Strategies ("playbooks"), tags, and performance scores
• Trading accounts and prop-firm challenge details you track
• Questions you ask the AI assistant

Commercial information

• Subscription plan and billing history
• Payment method details — collected and processed exclusively by Stripe; we never see your full card number

Data stored on your device

To make the app fast, a copy of your trade data and preferences is cached in your browser's local storage. This stays on your device, is removed when you log out, and is covered in detail in our Cookie Policy.

3. Lawful basis for processing

Under Article 6 of the UK/EU GDPR, we process your data based on: Performance of a contract (operating the journal, syncing your data, processing your AI assistant requests), Legitimate interests (securing the service, preventing fraud and abuse), Legal obligation (tax and financial records), and Consent (marketing emails, functional and analytics cookies). Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

4. How we use your data

• Providing the service — calculating P&L and statistics, rendering your dashboard and calendar, generating reports and insights
• Security and fraud prevention — authenticating you, detecting unusual account activity, rate-limiting abuse
• Communications — transactional emails (account confirmation, password resets) and, only with your consent, product news
• Legal compliance — responding to lawful requests, tax obligations

We do not sell your data, use it for advertising, or build profiles for any purpose other than showing you your own performance.

5. AI features & your data

Tradex includes two kinds of intelligence features, and they handle your data differently:

• Built-in insights and scores (Tradex Score, pattern insights, statistics) are computed locally in your browser from your own trades. This data does not leave your device for these features.
• AI assistant — when you ask the AI coach a question, your question and a summary of your trading statistics are sent over an encrypted connection to Anthropic (the provider of the Claude model), acting as our processor, to generate the answer. Under Anthropic's commercial API terms, this data is not used to train their models.

6. Data sharing & third parties

We do not sell, rent, or trade your personal information or trading data to any third party.

We share data only with service providers (processors) bound by data processing agreements, and only to the extent needed to run Tradex:

• Supabase — authentication, database hosting, and serverless functions (stores your account and trading data)
• Anthropic — AI assistant responses (receives your questions and aggregated trading statistics only when you use the AI assistant)
• Stripe — payment processing for Pro subscriptions
• Google — optional "Sign in with Google" authentication and web fonts
• Content delivery networks (jsDelivr, Cloudflare cdnjs) — deliver open-source libraries; they receive your IP address as part of serving files, nothing more

We may also disclose data where required by law, or as part of a merger or acquisition (in which case this policy continues to apply to your data).

7. International data transfers

Some of our processors (including Supabase, Anthropic, Stripe, and Google) process data in the United States and other countries outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards: adequacy decisions (including the EU-US and UK-US Data Privacy Framework where the provider is certified), Standard Contractual Clauses, and the UK International Data Transfer Addendum. You may request a copy of the relevant safeguards via privacy@tradexj.com.

8. Data security

• All data in transit is encrypted using TLS
• All data at rest is encrypted using AES-256
• Passwords are hashed with bcrypt before storage
• Database row-level security ensures each account can only ever read or write its own records
• AI requests are authenticated, rate-limited, and validated server-side
• We conduct regular security reviews of the platform

No system is 100% secure, but if we learn of a breach affecting your personal data we will notify you and the relevant supervisory authority as required by GDPR Articles 33–34. If you discover a security vulnerability, please disclose it responsibly to security@tradexj.com.

9. Data retention

• Account and trading data — retained for the life of your account plus 30 days after deletion, then permanently erased
• Payment records — retained for 7 years (tax compliance)
• IP address logs — retained for 90 days then deleted
• AI assistant requests — not stored by us after the response is generated; handled by Anthropic per their API data retention terms
• Locally cached data — remains on your device until you log out or clear browser storage

10. Your privacy rights

Under UK/EU GDPR you have the right to: access your data, correct inaccuracies, erasure ("right to be forgotten"), restrict processing, data portability (your trades are importable and exportable as CSV), object to processing based on legitimate interests, and withdraw consent at any time (for cookies, via Cookie settings).

To exercise any right, email privacy@tradexj.com. We respond within one calendar month. You also have the right to lodge a complaint with your supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, your national data protection authority.

11. Cookies & tracking

We use strictly necessary cookies and similar technologies (session authentication, security, your consent record) and, only with your prior consent, functional preference storage and analytics. We do not use advertising, retargeting, or third-party behavioural cookies. Full details — including every item we store, its purpose and its lifetime — are in our Cookie Policy. You can change or withdraw your choices at any time via Cookie settings.

12. Children's privacy

Tradex Journal is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has created an account, contact privacy@tradexj.com and we will delete it.

13. Contact

1. What this policy covers

This policy explains how Tradex Journal ("we", "us") uses cookies and similar technologies — including browser localStorage and sessionStorage — when you use tradexj.com. Under the EU/UK GDPR and the ePrivacy rules (PECR), these technologies are treated the same way as cookies: anything that is not strictly necessary requires your prior consent.

We do not use advertising, retargeting, cross-site tracking, or social media cookies — at all.

→ Open Cookie settings to review or change your choices

2. Strictly necessary (always active)

These are required for the site to function — signing in, keeping you signed in, enforcing your free trial, and remembering the cookie choices you made. They are exempt from consent under the ePrivacy rules. Legal basis: performance of a contract / legitimate interests (Art. 6(1)(b) and (f) GDPR).

3. Functional (requires your consent)

These remember your preferences to improve your experience. They are set only after you opt in, and are deleted if you later withdraw consent. Legal basis: consent (Art. 6(1)(a) GDPR).

If you decline functional storage the site still works fully — your preferences simply reset when you close the tab.

4. Analytics (requires your consent)

We currently set no analytics cookies or identifiers. If we introduce privacy-respecting analytics in the future, they will load only for users who have opted in to the Analytics category, and this table will be updated first.

5. Third-party content

Pages load fonts and open-source scripts from content delivery networks (Google Fonts, jsDelivr, Cloudflare cdnjs). These requests transmit your IP address to the CDN to deliver the file, but we do not permit them to set tracking cookies through our site. Authentication and data storage are provided by Supabase, acting as our processor.

6. Your choices & withdrawing consent

On your first visit we ask for your choices before any non-essential storage is used. You can change your mind at any time — withdrawing consent is as easy as giving it:

• Open Cookie settings (also linked in the site footer and in your account menu) to update or withdraw consent. Withdrawn categories are deleted immediately.
• Your consent expires automatically after 12 months, after which we ask again.
• You can also clear cookies and site data in your browser settings at any time.

7. Contact

1. Agreement to these terms

These Terms of Service ("Terms") are a binding agreement between you and Tradex Journal ("Tradex", "we", "us") governing your use of tradexj.com and related services (the "Service"). By creating an account or using the Service, you agree to these Terms and to our Privacy Policy and Cookie Policy. If you do not agree, do not use the Service.

2. The service

Tradex Journal is a trading journal and performance analytics tool. It lets you import or record your trades, attach journal notes and screenshots, organise strategies and prop-firm challenge accounts, and view statistics, calendars, reports, scores, and AI-assisted insights derived from your own data.

Tradex is an analytics tool only. It does not execute trades, connect to your brokerage account to place orders, hold funds, or provide brokerage, investment advisory, or portfolio management services.

3. Eligibility & your account

• You must be at least 18 years old to use the Service.
• You must provide accurate registration information and keep it up to date.
• You are responsible for safeguarding your password and for all activity under your account. Notify us immediately at security@tradexj.com if you suspect unauthorised access.
• One person per account. You may not share, sell, or transfer your account.

4. Plans, trials & billing

• Free plan — core journaling features at no cost.
• Pro trial — new accounts receive a 7-day free trial of Pro features. No credit card is required, and the trial does not auto-convert into a paid subscription.
• Pro subscription — billed in advance on a recurring basis (monthly or annually, as shown at checkout) via our payment processor, Stripe. Prices include applicable taxes where stated.
• Cancellation — you can cancel anytime; Pro remains active until the end of the paid period, after which your account reverts to the Free plan. Your data is not deleted on downgrade.
• Refunds — except where required by law (including the 14-day cooling-off rights of EU/UK consumers, where applicable), payments are non-refundable.
• Price changes — we may change prices with at least 30 days' notice; changes apply from your next billing cycle.

5. Your content & data

You own your data. Trades, journal entries, notes, screenshots, and strategies you add to Tradex remain yours. You grant us a limited, non-exclusive licence to host, store, process, and display that content solely to operate and improve the Service for you — nothing more.

• You can export your trade data at any time (CSV).
• You can delete your content or your entire account at any time; deletion is permanent after the 30-day window described in our Privacy Policy.
• You are responsible for the content you upload and must have the right to upload it. Do not upload unlawful content or other people's personal data.

6. AI features

The Service includes AI-assisted features: locally computed insights and an AI assistant powered by a third-party large language model (Anthropic's Claude). By using the AI assistant you instruct us to send your question and a summary of your trading statistics to that provider to generate a response, as described in our Privacy Policy.

• AI outputs are generated automatically and may be inaccurate, incomplete, or outdated. Always verify before relying on them.
• AI outputs are provided for informational and educational purposes only and are not advice of any kind (see Section 7).
• You may not use the AI features to generate unlawful or abusive content, or attempt to extract the underlying model or prompts.
• AI features may be rate-limited, modified, or withdrawn at any time.

7. Not financial advice & risk disclosure

Trading futures, foreign exchange, stocks, options, CFDs, and other instruments involves substantial risk of loss and is not suitable for every person. Past performance — including performance shown in your own journal — is not indicative of future results. You are solely responsible for your trading decisions. If you need advice, consult a licensed financial professional.

We are not a broker-dealer, investment adviser, or financial institution, and we are not regulated as such in any jurisdiction.

8. Acceptable use

You agree not to:

• Use the Service for any unlawful purpose or in violation of these Terms;
• Probe, scan, or test the vulnerability of the Service, bypass authentication or rate limits, or access data belonging to other users;
• Upload malware or content designed to disrupt the Service;
• Scrape, crawl, or harvest data from the Service, or use automated systems to access it except via interfaces we provide;
• Reverse engineer, decompile, copy, resell, sublicense, or white-label the Service;
• Misrepresent journal data generated by the Service as a verified track record when marketing services to others;
• Impersonate any person or misrepresent your affiliation with anyone.

We may suspend or terminate accounts that violate this section (see Section 14). Security researchers acting in good faith should follow responsible disclosure via security@tradexj.com.

9. Intellectual property

The Service — including its software, design, branding, and content we create (excluding your content) — is owned by Tradex Journal and protected by intellectual property laws. We grant you a limited, non-exclusive, non-transferable, revocable licence to use the Service for your personal or internal business use in accordance with these Terms. "Tradex Journal" and our logo may not be used without our prior written consent.

If you send us feedback or suggestions, you grant us a perpetual, royalty-free licence to use them without obligation to you.

10. Third-party services

The Service depends on third-party providers — including Supabase (authentication and data hosting), Stripe (payments), Anthropic (AI assistant), and content delivery networks. Their availability is outside our control, and their own terms apply to the processing they perform. Broker export formats (e.g. Tradovate, Rithmic) are supported for import convenience; we are not affiliated with or endorsed by those platforms.

11. Availability & changes to the service

We aim for high availability but the Service is provided without uptime guarantees. We may add, change, or remove features (including beta features, which are provided as-is and may change or disappear without notice), and we may impose reasonable usage limits to protect the platform. Where a change materially reduces core paid functionality, we will give Pro subscribers reasonable advance notice.

12. Disclaimer of warranties

To the maximum extent permitted by law, the Service is provided "as is" and "as available", without warranties of any kind, express or implied — including merchantability, fitness for a particular purpose, accuracy, and non-infringement. We do not warrant that statistics, imported data parsing, or AI outputs are error-free, or that the Service will be uninterrupted or secure. Nothing in these Terms excludes warranties or rights that cannot be excluded under applicable consumer law.

13. Limitation of liability

To the maximum extent permitted by law: (a) we are not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, lost data, or trading losses of any kind, even if advised of the possibility; and (b) our total aggregate liability arising out of or relating to the Service is limited to the greater of the amount you paid us in the 12 months before the claim or £50.

Nothing in these Terms limits liability for fraud, for death or personal injury caused by negligence, or for any liability that cannot be limited by law. You agree to indemnify us against claims arising from your unlawful use of the Service or violation of these Terms.

14. Termination

• By you — you may stop using the Service or delete your account at any time.
• By us — we may suspend or terminate your access (with notice where practicable) if you materially breach these Terms, create risk or legal exposure for us, or where required by law. Where the breach is curable, we will give you a reasonable opportunity to cure it.
• On termination, your right to use the Service ends. Data deletion follows the retention schedule in our Privacy Policy; Sections 7, 9, 12, 13, and 16 survive termination.

15. Changes to these terms

We may update these Terms from time to time. For material changes we will give at least 14 days' notice by email or in-app notice before the new terms take effect. Continued use of the Service after the effective date constitutes acceptance; if you do not agree, stop using the Service and, if you are a Pro subscriber, you may cancel for a pro-rata refund of the unused period.

16. Governing law & contact

These Terms are governed by the laws of England and Wales, and disputes are subject to the exclusive jurisdiction of the courts of England and Wales — except that if you are a consumer in the EU or UK, you retain the protection of the mandatory consumer laws of, and may bring proceedings in, your country of residence.