Privacy Notice

1. Who is the controller

TradePilot is operated by TradePilot, based in the Slovak Republic. TradePilot is the data controller for personal data processed through TradePilot.

2. What we collect and why

• Account data (email, password hash, display name) — to create and secure your account. Legal basis: performance of contract.
• Trading journal content (trades, tags, notes, screenshots you upload) — to provide the journaling and analytics features. Legal basis: performance of contract.
• AI interaction data (prompts and messages you send to Mirror Chat and coaching features) — to generate responses and improve your reflection. Legal basis: performance of contract.
• Support messages (messages, attachments, contact details you share via Help & Support) — to respond to your requests. Legal basis: legitimate interests / performance of contract.
• Usage & device data (IP address, browser, device identifiers, basic telemetry, error logs) — for security, fraud prevention, and to keep the service running. Legal basis: legitimate interests.
• Billing data (subscription plan, environment, Paddle customer & subscription IDs) — to manage your subscription. Payment card details are handled directly by Paddle and are never stored on our servers.

3. Who we share data with

• Merchant of Record — Paddle. Paddle.com is the reseller and Merchant of Record for TradePilot subscriptions, and processes payments, subscription management, tax compliance, and invoicing on our behalf.
• Hosting & infrastructure. Cloud hosting, database, authentication, storage, and AI inference providers used to operate the service.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

We do not sell your personal data.

4. International transfers

Some of our subprocessors are located outside the European Economic Area / UK. Where personal data is transferred outside those regions, we rely on appropriate safeguards such as EU Standard Contractual Clauses or an adequacy decision.

5. Retention

We keep your account data and journal content for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are legally required to keep records (for example, billing and tax records handled by Paddle).

6. Your rights

Under GDPR and equivalent laws you have the right to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority. We aim to respond to rights requests within one month.

7. Security

We use appropriate technical and organizational measures — including encryption in transit, role-based access controls, and row-level security in our database — to protect personal data. No system is 100% secure; if you believe your account has been compromised, contact us immediately.

8. Cookies

TradePilot uses only cookies and local storage strictly necessary to keep you signed in, maintain session security, and remember required app preferences. We do not use advertising or behavioral tracking cookies. Anonymous analytics is optional: it loads only after you choose “Allow anonymous analytics”, and choosing “Essential only” prevents Umami browser tracking. When enabled, we load Umami (cloud.umami.is) for aggregate product and web usage analytics. Umami tracking is cookie-free and may record selected non-identifying product events (for example that a journal entry was saved or a checkout was started). We do not intentionally send Journal content, Daily Mirror answers, trade data, file names, email addresses, names, user identifiers or payment details to Umami. You can change your analytics preference at any time in Settings → Analytics preferences. Paddle, our payment provider, may set its own necessary cookies or storage when you use checkout or billing surfaces. Our support chat stores only the conversation state and identifiers needed to continue a conversation across page loads.

9. Children

TradePilot is not intended for children under 16. Do not use the service if you are under 16.

10. Contact

To exercise your rights or ask a privacy question, contact us through the in-app Help & Support page.