We collect information you provide directly: account details (name, email), payment information (processed via third-party payment processors — we do not store card data), and trade data you voluntarily log to the platform.
Your data is used to: provide and improve the Service; personalise your analytics and scoring insights; generate anonymised aggregate statistics (e.g. platform-wide win rates); and communicate important account or service updates. We do not sell your personal data to third parties.
Your data is stored on secure infrastructure. We implement industry-standard encryption and access controls. However, no system is completely secure — you use the Service at your own risk and should use strong, unique passwords.
We use cookies for session management and may use analytics tools to understand platform usage patterns. These analytics are used internally to improve the product and do not identify you personally to third parties.
We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Anonymised, aggregated data may be retained indefinitely for platform analytics.
You have the right to access, correct, or delete your personal data. You can export your journal from the app (Account → Data) and delete your account yourself at any time (Account → Security → Delete my account), which erases it straight away. For anything else, contact [email protected]. We will respond within 30 days.
We use third-party services including payment processors and hosting providers. These services have their own privacy policies. We select providers who meet industry security standards.
If you choose Sign in with Google, we receive basic Google profile information needed to create and identify your TRADZY account: your name, email address, and profile picture if provided by Google.
TRADZY does not request access to Gmail, Google Drive, Google Calendar, Contacts, files, or any other Google service. We use Google account data only for authentication, account creation, account security, and showing your account identity inside TRADZY.
We do not sell Google user data, use it for advertising, or transfer it to third parties except service providers required to operate TRADZY, such as authentication, hosting, database, and payment infrastructure. These providers process data only as needed to provide the Service.
You can delete your TRADZY account and its associated Google sign-in data yourself in the app: Account → Security → Delete my account. Or contact [email protected] and we will do it within 30 days.
You can choose to connect a crypto exchange account so your closed trades appear in your journal automatically. This is optional; manual logging and file import work without it.
To connect, you give TRADZY a read-only API key. Where the exchange can report a key's permissions, we check it and refuse any key that can trade, transfer or withdraw; for other exchanges you confirm the key is read-only. TRADZY never places orders or moves funds.
The key, secret and passphrase are stored encrypted (Supabase Vault) and are never shown back to you or readable from the app. We use them only to read your trade history: market, side, entry and exit prices, size, profit or loss, fees and times. Those trades are saved to your journal like any other trade.
Disconnecting an exchange deletes its key immediately; trades already synced stay in your journal until you delete them. Deleting your account deletes all connected keys and your synced trades.
TRADZY works like a browser for the links and symbols you give it. When you paste a chart link, our servers open that page for you, read the price chart it shows and show you the result. The page belongs to its owner (a broker, an exchange, TradingView or another site), not to TRADZY. You are responsible for the links you choose to open, for what you do with what you see, and for following the terms of any site or data provider you use. We do not control what other sites contain or how they are run.
For a link you paste, we read the page even where its robots.txt asks automated visitors to stay away. We never get around captchas, bot checks, sign-in walls or access blocks: where a site refuses us, we say so and suggest a screenshot instead.
What we keep: the price candles read from a chart may be kept in our analysis records, without your name or account, so that the analysis can be checked later. We do not keep screenshots you upload, candles you type or import yourself, or the pages themselves beyond a short cache. A chart you have read may also be kept on your phone, so it can be shown again if the site is down; it never leaves your phone.
Privacy enquiries: [email protected]