Privacy Notice

1. Who is the controller

TradePilot is operated by TradePilot, based in the Slovak Republic. TradePilot is the data controller for personal data processed through TradePilot.

2. What we collect and why

• Account data (email, password hash, display name) — to create and secure your account. Legal basis: performance of contract.
• Trading journal content (trades, tags, notes, screenshots you upload) — to provide the journaling and analytics features. Legal basis: performance of contract.
• AI interaction data (prompts and messages you send to Mirror Chat and coaching features) — to generate responses and improve your reflection. Legal basis: performance of contract.
• Support messages (messages, attachments, contact details you share via Help & Support) — to respond to your requests. Legal basis: legitimate interests / performance of contract.
• Usage & device data (IP address, browser, device identifiers, basic telemetry, error logs) — for security, fraud prevention, and to keep the service running. Legal basis: legitimate interests.
• Billing data (subscription plan, environment, Paddle customer & subscription IDs) — to manage your subscription. Payment card details are handled directly by Paddle and are never stored on our servers.

3. Who we share data with

• Merchant of Record — Paddle. Paddle.com is the reseller and Merchant of Record for TradePilot subscriptions, and processes payments, subscription management, tax compliance, and invoicing on our behalf.
• Hosting & infrastructure. Cloud hosting, database, authentication, storage, and AI inference providers used to operate the service.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

We do not sell your personal data.

4. International transfers

Some of our subprocessors are located outside the European Economic Area / UK. Where personal data is transferred outside those regions, we rely on appropriate safeguards such as EU Standard Contractual Clauses or an adequacy decision.

5. Retention

We keep your account data and journal content for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are legally required to keep records (for example, billing and tax records handled by Paddle).

6. Your rights

Under GDPR and equivalent laws you have the right to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority. We aim to respond to rights requests within one month.

7. Security

We use appropriate technical and organizational measures — including encryption in transit, role-based access controls, and row-level security in our database — to protect personal data. No system is 100% secure; if you believe your account has been compromised, contact us immediately.

8. Cookies

TradePilot uses only cookies and local storage strictly necessary to keep you signed in, remember your preferences, and secure the session. We do not currently use third-party advertising cookies. If we add analytics or marketing cookies in the future, we will ask for your consent where required.

9. Children

TradePilot is not intended for children under 16. Do not use the service if you are under 16.

10. Contact

To exercise your rights or ask a privacy question, contact us through the in-app Help & Support page.