Privacy Policy

TradeVault Pro ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy describes how we collect, use, store, and protect information when you use our service at tradevaultpro.app. By using our service, you agree to the practices described in this policy.

1. Who We Are

TradeVault Pro is a professional trading journal SaaS operated from France. For all privacy matters, contact us at support [at] tradevaultpro.app.

2. Data We Collect

We collect only the data necessary to provide our service:

• Account data: Your email address and encrypted password when you register. We never store plain-text passwords.
• Trading data: Trade entries, notes, setups, playbook entries, daily reviews, and account settings that you manually input or import from your broker.
• Payment data: Subscription billing is handled entirely by Stripe. We never store your card number, CVV, or any sensitive payment information — only a Stripe customer ID.
• Usage analytics: We use Google Analytics to understand how users navigate our site (pages visited, session duration, referral sources). This data is aggregated and anonymised.
• Technical data: Session tokens and browser preferences (such as dark/light mode) stored in your browser's local storage.

3. How We Use Your Data

• To provide, operate, and maintain the TradeVault Pro service
• To process subscription payments and manage your billing via Stripe
• To send transactional emails: account confirmation, password reset, billing receipts
• To analyse product usage and improve features via Google Analytics
• To respond to your support requests

4. Data Storage & Security

Your data is stored in a secure cloud database provided by Supabase, hosted on AWS infrastructure. We enforce row-level security (RLS) on all tables — this means your trading data is cryptographically isolated so that only your authenticated session can access it. Not other users, and not our team.

All data is encrypted in transit using TLS/HTTPS and encrypted at rest. Access to production systems is strictly limited and logged.

5. Data Sharing & Third Parties

We do not sell, rent, or share your personal data with third parties for marketing purposes. We only share data with the following service providers, strictly to operate the service:

• Stripe — payment processing. Stripe Privacy Policy →
• Supabase — database and authentication hosting. Supabase Privacy Policy →
• Google Analytics — anonymised website analytics. You can opt out at tools.google.com/dlpage/gaoptout

We may also disclose data if required by applicable law or legal process.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access: Request a copy of all personal data we hold about you
• Right to rectification: Correct any inaccurate data
• Right to erasure: Request deletion of your account and all associated data ("right to be forgotten")
• Right to portability: Export your trading data at any time via Settings → Export JSON
• Right to object: Object to processing of your data for analytics purposes
• Right to restrict processing: Request that we limit processing of your data in certain circumstances

To exercise any of these rights, contact us at support [at] tradevaultpro.app. We will respond within 30 days.

7. Cookies & Local Storage

TradeVault Pro uses:

• Essential cookies: Session authentication tokens required to keep you logged in
• Preference storage: Your theme preference (dark/light mode) stored in browser local storage
• Google Analytics cookies: _ga, _gid cookies used to track anonymised usage statistics. These can be blocked via your browser or the Google opt-out tool above

We do not use advertising cookies, retargeting cookies, or any third-party tracking beyond Google Analytics.

8. Data Retention

We retain your personal data for as long as your account is active. If you cancel your subscription and request account deletion, all your personal data and trading data will be permanently and irreversibly deleted from our systems within 30 days.

9. International Transfers

Your data may be processed on servers located in the United States (AWS, Supabase). These transfers are governed by standard contractual clauses approved by the European Commission, ensuring adequate protection of your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Your continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy questions, data requests, or concerns: support [at] tradevaultpro.app

Or visit our Support page →