Privacy Policy

Last updated: July 29, 2026

Tradexy ("we", "us", "our") operates the website tradexy.app and the Tradexy trading journal application. This policy explains how we collect, use, and protect your personal data.

• Account data: name, email address, password (hashed).
• Profile data: timezone, currency preference.
• Trade data: trades, notes, screenshots, and checklist responses you enter.
• Usage data: login timestamps, storage usage.
• Technical data: IP address, browser type, session data.
• Marketing attribution: Google click id (gclid) and UTM campaign parameters when you arrive from an ad or tracked link, stored on your account at registration.

• To provide and operate the Tradexy service.
• To personalise your experience (timezone, currency).
• To send account-related emails (password reset, notifications).
• To improve the product based on aggregated, anonymised usage data.

Your data is stored on secure servers in the European Union. Trade screenshots are stored in private storage and are only accessible to you. We do not sell or share your personal data with third parties for marketing purposes.

We use a small number of trusted third-party service providers ("sub-processors") to operate Tradexy. Each processes personal data only on our instructions, under a data processing agreement (DPA), and only for the purposes described below.

• Stripe — payment processing. Receives billing and payment details when you subscribe to Pro. PCI-DSS compliant; we never store full card numbers.
• PostHog — product analytics. Receives aggregated, anonymised usage data to help us improve the product when you grant analytics consent.
• Google LLC — Google Ads conversion measurement. Receives conversion and click identifiers (such as gclid) only when you grant advertising consent, so we can measure whether ads led to sign-ups or subscriptions. Google may process this data outside the EU/EEA under Standard Contractual Clauses.
• Resend — email delivery. Sends transactional account emails (verification, password reset, security notices) and, only if you opt in, marketing/educational emails. Resend may process email data for opt-in marketing as Tradexy's service provider, while Tradexy does not share personal data with independent third parties for their own marketing purposes. Unsubscribes from marketing emails are handled by Resend preference pages and mirrored back to your account.
• OpenAI — AI coaching (Pro, opt-in). Receives pseudonymised, minimised trade data when you request AI analysis. Does not use API data to train its models, and applies limited (approximately 30-day) retention for abuse monitoring only.
• Anthropic — AI coaching fallback (Pro, opt-in). Used only when the primary AI provider is unavailable. Receives the same pseudonymised, minimised data on the same terms, and does not use API data to train its models.

OpenAI and Anthropic process data outside the EU/EEA. Where data is transferred internationally, it is protected by appropriate safeguards such as Standard Contractual Clauses.

AI coaching is an optional Pro feature that provides non-advisory feedback on your trading behaviour. It is opt-in — no trade data is sent to any AI provider unless you explicitly enable AI coaching and trigger an analysis.

• We send only pseudonymised, minimised data (such as instrument, timeframe, position, outcome, R-multiples, and your own notes). We never send your name, email, account identifiers, or raw account balances.
• Trade screenshots are excluded from AI coaching payloads.
• Coaching requests are not retained by providers for model training, and each analysis is processed as a stateless, self-contained request.
• AI coaching does not provide financial advice or trade signals, and every AI response includes a clear disclaimer.

We use cookies in the following categories. You can change your choice at any time via the Cookie preferences link in the site footer, which reopens the consent banner. Consent is stored per category (Analytics and Advertising). Rejecting Advertising does not affect Analytics, and vice versa.

• Strictly necessary — the Laravel session cookie (tradexy-staging-session) and the XSRF-TOKEN cookie keep you signed in securely and protect forms from cross-site request forgery. These cannot be disabled. First-touch marketing attribution parameters (gclid and UTM fields) are stored in the Laravel session until you register, then on your user account, so we can attribute sign-ups to campaigns. Session storage does not set an additional tracking cookie.
• Preference — the cookie_consent_v2 cookie stores your Analytics and Advertising choices for one year so we do not re-prompt you on every visit.
• Analytics — after you grant Analytics consent, we set ph_distinct_id and PostHog ph_* cookies so we can understand how the public site is used. These cookies are not set if you reject Analytics or have not yet chosen. Analytics on the authenticated journal panel is covered under the PostHog sub-processor disclosure in section 5.
• Advertising — after you grant Advertising consent, Google Ads may set conversion cookies (via the Google tag, conversion ID prefixed AW-) so we can measure whether an ad click led to a trial sign-up or paid subscription. Without Advertising consent, Google Consent Mode keeps ad storage denied and conversion measurement is limited or modelled. You can withdraw Advertising consent at any time via Cookie preferences.

If you are in the EU/EEA, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and all associated data.
• Export your trade data in CSV format.
• Object to or restrict certain processing.

To exercise these rights, contact us at privacy@tradexy.app .

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days.

We use industry-standard encryption (TLS/HTTPS) for data in transit and bcrypt hashing for passwords. Access to production systems is restricted to authorised personnel.

We may update this policy from time to time. We will notify registered users of significant changes by email.

Questions about this policy? Email us at privacy@tradexy.app .