1. Information We Collect
- Account data: email address, name, and profile information provided during sign-up via Clerk.
- Trade data: trade logs, screenshots, notes, and analytics you enter into the journal.
- Telegram data: channel names, source identifiers, raw signal text, parsed fields, and execution status for sources you choose to monitor. Signal records remain with your account until you delete them or your account, subject to operational backups.
- Discord data: channel names, bot or webhook payload text, parsed fields, and execution status when you connect Discord.
- WhatsApp Business data: sender phone number (hashed), display name, and message text when you connect a WhatsApp Business webhook.
- Email signal data: if you connect an IMAP inbox, message subject + body are processed by our signal parser; raw emails are not stored. The app password is stored encrypted at rest.
- Voice data: voice trade entry runs entirely in your browser via the Web Speech API — audio is never sent to our servers. Only the resulting parsed structure is stored.
- AI-processed content: signal text, trade fields, and images or screenshots you deliberately submit to an AI analysis feature may be sent to Anthropic (Claude) for parsing or analysis. Do not include unrelated personal information.
- AI support data: when you ask the Telegram support assistant a question, we may send Make.com a sanitized version of the question, language, plan label, linked-account status, and non-sensitive diagnostic flags. Raw broker account IDs, copier tokens, passwords, OTPs, payment-card data, credentials, and private logs are deliberately withheld from that workflow. Requests needing account action may be handed to human support.
- Broker credentials: if you connect a cloud broker, the credentials or API token required for that connection are encrypted at rest and sent to the selected execution provider (such as MetaApi or api2trade) to operate your account.
- Payment data: card and app-store payments are processed by the hosted payment provider shown at checkout; card numbers never touch our servers. For USDT we record the public transaction hash and sending wallet needed for verification. For supported local methods we record the payment reference and status needed to match and support the purchase.
- Usage data: pages visited, features used, and error logs for improving the Service. Optional website analytics load only after consent.
- Cookies: essential cookies for authentication and remembering settings. Optional analytics, chat, advertising, and review widgets require consent.
2. How We Use Your Information
- To provide and improve the Service
- To process payments and manage your subscription
- To send transactional emails (receipts, plan changes)
- To send optional weekly trade reports (you can unsubscribe)
- To display relevant ads on the free plan via Google AdSense
3. Data Storage
Your data is stored on Supabase (PostgreSQL, hosted on AWS). Trade screenshots are stored in Supabase Storage. All data is encrypted at rest and in transit via HTTPS.
4. Third-Party Services
- Clerk — authentication and user management
- Supabase — database and file storage
- Anthropic — AI parsing, summaries, categorization, and user-requested image analysis
- Make.com and its selected AI provider — orchestrating sanitized Telegram product-support questions and structured support responses
- MetaApi or api2trade — cloud broker connectivity and execution when you select that setup
- Gumroad — hosted card checkout, tax handling, receipts, and payment lifecycle events for products available through card checkout
- RevenueCat, Google Play, and Apple — mobile-app purchase validation and subscription status
- TRON network services — verifying inbound USDT (TRC20) transactions on the public blockchain
- Resend — transactional and opted-in lifecycle email delivery
- Google AdSense, Vercel Analytics, Crisp, and Trustpilot — optional ads, analytics, chat, and review widgets loaded only after consent; ads, chat, and review widgets are used on marketing pages
- Vercel — hosting and edge delivery
5. Data Sharing
We do not sell your personal data. We share data only with the third-party services listed above as necessary to provide the Service, and with legal authorities if required by law.
6. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by emailing support@tradejournalpro.net. Account deletion removes all your trade data permanently within 30 days.
7. Cookies
We use essential storage and cookies for authentication and settings. Optional analytics, chat, review widgets, and AdSense scripts load only after you choose “Accept all” in the cookie banner. Choosing “Essential only” leaves those optional scripts disabled. You can change your choice at any time with the “Cookie settings” link in the site footer.
8. Children
The Service is not directed at children under 18. We do not knowingly collect data from minors.
9. Changes
We may update this policy periodically. We will notify you of significant changes via email or in-app notice.