Privacy Policy
Last updated: October 9, 2026
1. Who we are
TradeProfAI is operated by:
Contact: info@tradeprofai.com
The operating company's details will be added here once incorporation is complete.
We are the "controller" of your personal data under the UK GDPR and the Data Protection Act 2018, and — for users in the European Union — the EU GDPR.
2. What we collect
| Category | Data |
|---|---|
| Account | Email address; password (stored only as a one-way hash by our authentication provider) |
| Usage | Plan, analysis count, watchlist, trade-journal entries and notes you write, lesson progress, email preferences |
| Usage records | For each analysis: date, mode, success/failure and token counts (no images or content). Kept 13 months. |
| Chart images | The chart screenshot you upload or select with the browser extension — sent for analysis and not stored by us (see section 5) |
| Security | IP address and browser details in login sessions; IP address in rate-limit records (kept 1 day); a salted hash of your IP at sign-up (kept briefly) |
| Legal records | Which version of our Terms and Privacy Policy you accepted, and when |
Please make sure your chart screenshots don't show account balances, usernames or other personal details. We do not ask for special category data and you should not upload it.
3. Why we use it and our lawful basis
| Purpose | Lawful basis (UK/EU GDPR Art. 6) |
|---|---|
| Create and run your account; produce analyses; deliver lessons; apply plan limits | Contract (6(1)(b)) |
| Watchlist chart-alert and daily report emails (paid-plan features you switch on) | Contract (6(1)(b)) |
| Daily news digest email (only if you opt in) | Consent (6(1)(a)) — withdraw any time via the link in every email or in Account settings |
| Prevent abuse and keep the service secure (rate limits, CAPTCHA, session logs) | Legitimate interests (6(1)(f)) — protecting the service and other users |
| Keep records of your acceptance of our terms; handle legal claims | Legitimate interests (6(1)(f)) and legal obligation (6(1)(c)) |
| Accounting and tax records | Legal obligation (6(1)(c)) |
We do not use your data for advertising, we do not sell it, and we do not make decisions about you that produce legal or similarly significant effects based solely on automated processing. The AI analysis describes a chart; it does not assess you.
4. Who we share it with
| Recipient | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Supabase | Database and authentication | Germany (EU) | UK adequacy regulations for the EEA |
| Vercel | Hosting and server functions | United States | UK International Data Transfer Addendum / IDTA in Vercel's DPA |
| Anthropic | AI model that produces the analysis | United States | Standard contractual clauses and UK Addendum in Anthropic's DPA |
| Resend | Sending emails | United States | UK Extension to the EU-US Data Privacy Framework and UK Addendum in Resend's DPA |
| hCaptcha (Intuition Machines, Inc.) | Bot protection at sign-up and login | United States | UK Extension to the EU-US Data Privacy Framework |
| TradingView (TradingView Inc.) | Chart widgets — loaded only if you accept optional cookies | United States and United Kingdom | Independent controller; their privacy policy applies |
Market data providers (Binance, Twelve Data) and news sources receive no personal data.
We may disclose data where the law requires it.
5. Chart images and AI
Your chart image is sent from our server to Anthropic to generate the analysis. We do not store the image or the result on our servers. Anthropic deletes API inputs and outputs within 30 days, except where content is flagged under its usage policy (kept up to 2 years) or where the law requires otherwise. Anthropic does not use our customers' content to train its models.
6. How long we keep data
| Data | Retention |
|---|---|
| Account data | Until you delete your account; then deleted immediately |
| Chart images and analysis results | Not stored by us |
| Rate-limit records | Up to 2 days |
| Sign-up IP hash | Short abuse-prevention window plus 1 day |
| Acceptance records | Kept while your account exists; deleted when you delete your account. |
| Accounting records | As required by UK law (generally 6 years) |
| Backups | None |
7. Your rights
You can ask to access, correct, delete or port your data, to restrict or object to processing, and to withdraw consent at any time. You can download a copy of your data and delete your account yourself from the Account page. Email info@tradeprofai.com from your registered address for anything else; we reply within one month. You can complain to the Information Commissioner's Office (ico.org.uk) or, in the EU, to your local data protection authority.
8. Age
TradeProfAI is for adults aged 18 and over.
9. Cookies
See our Cookie Policy.
10. Changes
We will tell you by email or in the app before material changes take effect.