TradeCoreLab

Privacy Policy

Last updated: April 1, 2026

How we collect, use, and protect your data.

1. What We Collect

  • Account data: email address, hashed password (managed by Supabase Auth)
  • Trade data: everything you enter or upload (trades, P&L, notes, strategies, tags, screenshots)
  • AI interaction data: prompts sent to AI and responses received (stored for your analysis history)
  • Browser storage: localStorage for UI preferences (dismissed tips, theme) — no tracking cookies

2. How We Use Your Data

  • To provide the service (store trades, generate analytics, run AI analysis)
  • To improve the service (aggregate usage patterns, fix bugs)
  • To communicate with you (account-related emails — e.g. password resets, critical service updates)
  • If you opted in: to send product updates, new features, and trading tips via email

We do NOT sell your data, use it for advertising, or share individual trade data with other users.

Marketing Communications

Marketing emails are optional and opt-in only. You choose during signup whether to receive them. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by contacting us. We will never send marketing emails without your explicit consent.

3. Third-Party Services

Your data is processed by:

  • Supabase: database hosting, authentication, file storage. Data is stored on Supabase-managed servers. Supabase maintains appropriate safeguards for data transfers.
  • Anthropic (Claude): AI processing of screenshots and trade analysis. When you upload a screenshot, it is sent to Anthropic's API for processing. Under Anthropic's API terms, API inputs are not used for model training by default.
  • Vercel: application hosting

Each service has their own privacy policies that apply to their processing of your data.

4. Data Storage & Security

  • Data stored in Supabase (cloud-hosted PostgreSQL)
  • Row-level security ensures users can only access their own data
  • Screenshots stored in private storage buckets
  • Passwords hashed (never stored in plaintext)
  • HTTPS encryption in transit

While we take reasonable precautions, no system is 100% secure.

5. Data Retention

  • Your data is retained as long as your account is active
  • During alpha, data may be deleted if the service is discontinued
  • You may request account deletion by contacting the developer
  • Upon deletion request, all trade data, screenshots, and AI history will be removed from active systems within 30 days and from backups within 90 days

6. Cookies & Local Storage

  • We do NOT use tracking cookies
  • We use localStorage for UI preferences (tip dismissals, theme)
  • Supabase Auth uses httpOnly cookies for session management (functional, not tracking)
  • No third-party tracking scripts

7. Your Rights

  • View all your data within the app
  • Request a copy of your data (export feature planned for a future release)
  • Request deletion of your account and all associated data

8. Children's Privacy

The service is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy at any time without prior notice. Changes take effect as soon as they are posted on this page with an updated date. Your continued use of the service after any changes constitutes your acceptance of the revised policy.

10. Contact

Privacy questions? Contact the developer directly.