Privacy policy

1. Data controller

TrackMyTrade, an independent project run by its founder. For any request about your data you can contact us via the support form in the app (Feedback button).

2. Data processed

• Account data: name, email address, language, password (stored only in encrypted form) and any second authentication factor.
• Journal data you enter: trades, accounts, deposits and withdrawals, settings, notes, daily diary, screenshots and reviews.
• Exchange connections: read-only API keys, stored encrypted, or the public wallet address.
• Payment data: handled directly by Stripe; we only receive the subscription status and a customer identifier, never card details.
• Feedback, reviews and support requests you send us.
• Technical data: strictly necessary cookies, technical logs, error reports and aggregated, cookie-free visit statistics.

3. Purposes and legal bases

• Providing the service and the personal area, including exchange sync and the AI coach requested by the user (performance of a contract, Art. 6(1)(b) GDPR).
• Managing the subscription, billing and tax obligations (contract and legal obligation, Art. 6(1)(b) and 6(1)(c)).
• Sending service communications and, if enabled in the settings, summaries and reminders (contract; you can turn them off at any time).
• Ensuring security and measuring site use in aggregate form (legitimate interest, Art. 6(1)(f)).

4. Providers and transfers

We rely on providers acting as data processors: Supabase (authentication, database and file storage), Vercel (hosting), Stripe (payments), Resend (email delivery), Anthropic (AI coach: receives aggregated statistics without notes or amounts and, only when you use "Fill from screenshot", the image you upload, to read its data), Plausible (cookie-free visit statistics), Sentry (error reporting) and Telegram if you connect the bot. Market prices, the economic calendar and the news are requested from public services (Binance, Forex Factory, Nasdaq and the news sites listed in the News section) without sending your personal data.

Some providers may process data outside the European Economic Area on the basis of the Standard Contractual Clauses approved by the European Commission or adequacy decisions.

5. Retention

Journal data is kept for as long as you keep your account. Deleting the account from the settings permanently erases it, together with screenshots and exchange keys. Billing data is kept for the period required by tax law.

6. Security

Encrypted connections, data access limited to the individual account, encrypted API keys, optional two-step verification.

7. Your rights

You can request access, rectification, erasure, restriction and portability, and object to processing, by contacting us via the support form in the app (Feedback button). From the settings you can download a full copy of your data and delete your account at any time. You can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).