TradeCoreLab

Privacy Policy

Last updated: April 1, 2026

How we collect, use, and protect your data.

1. What We Collect

  • Account data: email address, hashed password (managed by our authentication provider)
  • Trade data: everything you enter or upload (trades, P&L, notes, strategies, tags, screenshots)
  • AI interaction data: prompts sent to AI and responses received (stored for your analysis history)
  • Browser storage: localStorage for UI preferences (dismissed tips, theme) — no tracking cookies

2. How We Use Your Data

  • To provide the service (store trades, generate analytics, run AI analysis)
  • To improve the service (aggregate usage patterns, fix bugs)
  • To communicate with you (account-related emails — e.g. password resets, critical service updates)
  • If you opted in: to send product updates, new features, and trading tips via email

We do NOT sell your data, use it for advertising, or share individual trade data with other users.

Marketing Communications

Marketing emails are optional and opt-in only. You choose during signup whether to receive them. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by contacting us. We will never send marketing emails without your explicit consent.

3. Third-Party Services

We use trusted third-party service providers to operate the platform:

  • Cloud infrastructure provider — stores your account, trades, and uploaded images
  • AI processing provider — analyzes your trade data and screenshots to generate coaching insights. Your data is not used for AI model training.
  • Hosting provider — serves the application

We carefully select providers that maintain appropriate security standards and data protection practices. Each provider is subject to their own privacy policies. We may change providers from time to time to improve the service — this page will be updated accordingly.

4. Cross-Border Data Transfers

Your data may be stored and processed in different regions depending on the service provider. When you use AI-powered features (screenshot parsing, AI coaching, feedback review), your trade data may be sent to servers in a different country for processing and the results are returned to our servers. We ensure that any cross-border transfer of your data is carried out with appropriate safeguards to maintain a comparable level of protection.

5. Data Storage & Security

  • Data stored in cloud-hosted databases with industry-standard security
  • Row-level security ensures users can only access their own data
  • Screenshots stored in private storage buckets
  • Passwords hashed (never stored in plaintext)
  • HTTPS encryption in transit

While we take reasonable precautions, no system is 100% secure.

6. Data Retention

  • Your data is retained as long as your account is active
  • During alpha, data may be deleted if the service is discontinued
  • You may request account deletion by contacting the developer
  • Upon deletion request, all trade data, screenshots, and AI history will be removed from active systems within 30 days and from backups within 90 days

7. Cookies & Local Storage

  • We do NOT use tracking cookies
  • We use localStorage for UI preferences (tip dismissals, theme)
  • Our authentication provider uses httpOnly cookies for session management (functional, not tracking)
  • No third-party tracking scripts

8. Your Rights

  • Access: View all your data within the app
  • Correction: Request correction of any inaccurate personal data by contacting the developer
  • Export: Request a copy of your data (export feature planned for a future release)
  • Deletion: Request deletion of your account and all associated data

9. Data Protection (PDPA)

We comply with the Personal Data Protection Act 2012 (PDPA) of Singapore. By creating an account and using the service, you consent to the collection, use, and disclosure of your personal data as described in this policy. We only use your data for the purposes stated here and will not use it for any other purpose without your consent.

10. Data Breach Notification

In the event of a data breach that is likely to result in significant harm, we will notify affected users and the relevant authorities (including the Personal Data Protection Commission of Singapore) as required by law. We aim to notify affected users within 3 business days of confirming a significant breach.

10. Children's Privacy

The service is not intended for users under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy at any time without prior notice. Changes take effect as soon as they are posted on this page with an updated date. Your continued use of the service after any changes constitutes your acceptance of the revised policy.

12. Contact

Privacy questions? Contact the developer directly.