TradeTempo

Legal

Privacy Policy

What we collect, why we collect it, and how to get it back.

Last updated: May 4, 2026

1. Data we collect

When you use TradeTempo, we store the following on your behalf:

  • Account information. Email address and display name (Google OAuth or email magic-link signup).
  • Trading data.Prop firm account details, evaluation status, costs, payouts, and any trade fills / round-trip P&L the Chrome extension forwards from trader.tradovate.com or topstepx.com.
  • Journal entries. Pre-session plans, post-session reviews, mood scores, rule definitions, and rule-compliance records.
  • Chart screenshots. Captured by the extension or uploaded by you for AI grading and journal review.
  • Billing data. When you upgrade, Stripe holds your payment method. We store only the Stripe customer + subscription IDs and your current plan tier — never card numbers.
  • Usage telemetry. AI cap counts, cron-run logs, and aggregated rule-adherence stats used to power the dashboard and to operate within Anthropic spend limits.

2. How we use your data

  • Compute P&L, ROI, drawdown, and rule-adherence metrics on the dashboard.
  • Power the in-session AI coach + rule audits the extension surfaces while you trade.
  • Send transactional email (magic-link signin, trial reminders, billing receipts, weekly digest if you've opted in).
  • Operate accountability-partner views — only with the partners you explicitly approve, only as your anonymized handle.
  • Detect abuse and enforce per-user rate limits.

3. Third-party services

We use the following processors to operate TradeTempo. Each receives the minimum data required for its function and processes it under its own privacy terms.

  • Neon (PostgreSQL). Database hosting for all application data. Encrypted at rest + in transit.
  • Vercel. Application hosting, serverless functions, and blob storage for chart screenshots.
  • Auth.js + Google OAuth. Authentication. We receive your email and display name only — no other Google data.
  • Stripe. Subscription billing + customer portal. Stripe holds card numbers and bank details directly; we never touch them.
  • Anthropic (Claude).Rule audits, the in-session coach, the weekly digest narrative, and behavior-pattern detection. Anthropic's API does not train on inputs.
  • Resend. Transactional email delivery (magic-link signin, trial-lifecycle emails, weekly digest).
  • Pusher. Real-time updates between accountability partners (lock-in events + activity feed).
  • Sentry. Production error monitoring. Captures stack traces and a hashed user id when the app crashes — no trading data, no journal contents.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Cookies

We use essential cookies only for authentication session management and a short-lived tt_refreferral cookie if you arrive via a friend's link. No tracking pixels, no advertising cookies, no third-party analytics.

5. Data retention & deletion

Data is retained while your account is active. You can delete your account at any time from Settings → Danger Zone. On deletion, every row tied to your user is permanently removed within 30 days, including journal entries, chart captures, and trade history. Stripe retains transactional records under its own retention policy for tax and dispute reasons.

6. Data export (GDPR portability)

You have the right to export everything we store about you at any time. Use Settings → Export my data to download a JSON archive of journal entries, trades, rules, accounts, and partner relationships.

7. Your rights (GDPR & CCPA)

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Export your data in a portable format.
  • Withdraw consent for optional data processing.
  • Opt out of non-essential communications (digest, reminders).
  • Lodge a complaint with your local data-protection authority. For EU/EEA, your supervisory authority; for the US, your state attorney general or the FTC.

8. Data security

We use TLS for all transport, encrypted database storage at rest, and scoped per-user API keys (SHA-256 hashed in the database) for the Chrome extension. Admin access is gated by a single allowlist and audit-logged. No system is 100% secure — if you suspect compromise, email hello@tradetempo.ai immediately.

9. Children

TradeTempo is intended for adults trading their own capital or evaluating prop firm accounts. We do not knowingly collect data from anyone under 18. If you believe a minor created an account, contact us and we'll remove it.

10. Changes to this policy

Material changes are emailed to registered users. The version date at the top of this page always reflects the current copy. Continued use after the effective date means you accept the updated terms.

11. Contact

Privacy questions, requests, or concerns: hello@tradetempo.ai.