Privacy Policy

Who is responsible

TraderMind is responsible for the personal data described here (the “controller” under the EU General Data Protection Regulation, GDPR). For any privacy question or request, write to tradermind.team@gmail.com.

What we collect and why

If you join the waitlist

• Your email address, the markets you trade, the price range you chose and which page or video brought you.
• Why: to tell you when TraderMind opens and to understand who is interested. Legal basis: your consent, which you can withdraw at any time by writing to us.
• How long: until access opens and for up to 12 months after, or until you ask us to remove it.

If you create an account

• Your name and email address.
• Your password, stored only as a one-way hash (bcrypt). Nobody, including us, can read your password.
• Everything you put in your journal: trading accounts and balances, trades, results, notes, screenshots, setups, tags, goals and reminder settings.
• Why: to provide the journal you signed up for. Legal basis: performance of our contract with you.
• How long: while your account exists. When you ask us to delete it, your account and all journal data are deleted.

If you buy founding member access

• Payments are handled entirely by Stripe. We never see or store your card details. We receive your name, email, the amount paid and which video brought you.
• Why: to give you the access you paid for, send invoices and handle refunds. Legal basis: contract, and our legal obligation to keep invoicing records (kept for the period Portuguese tax law requires).

Technical data

• IP address: used to limit repeated sign-in, sign-up and waitlist attempts (an anti-abuse measure, our legitimate interest). These counters expire after 15 minutes and are deleted daily. Our hosting provider also keeps short-lived server logs.
• Cookies and local storage: only what the app needs to work: your sign-in session, the trading account you are viewing, whether the sidebar is collapsed, whether you closed the getting-started list, your light or dark theme and whether you dismissed today’s reminder. There are no analytics, advertising or tracking cookies.

What we don’t do

• We don’t sell or rent your data.
• We don’t use your journal for advertising.
• We don’t share your trades or notes with anyone except the service providers below, who run the app for us.

Who processes data for us

• Supabase: database. Your data is stored in the European Union (Ireland).
• Vercel: hosting. The app’s servers run in the European Union (Dublin). Vercel is a US company; transfers outside the EU are covered by the European Commission’s Standard Contractual Clauses.
• Stripe: payments, only if you buy. Stripe acts under its own privacy policy for payment data.

How we protect it

• All traffic is encrypted (HTTPS only).
• Passwords are hashed, never stored in readable form.
• Every request is checked so you can only ever reach your own data.
• The database is closed to direct access from the internet; only the app can read it.
• Repeated sign-in attempts are slowed down to block password guessing.

Your rights

You can ask us to access, correct, delete or export your data (in a machine-readable format), to restrict or object to how we use it, and to withdraw consent at any time. Write to tradermind.team@gmail.com. We answer within one month.

If you think we are not handling your data properly, you can also complain to the Portuguese data protection authority, the CNPD (www.cnpd.pt), or to the authority in your own EU country.

Age

TraderMind is meant for adults. Don’t use it if you are under 18.

Changes

If we change what we collect or how we use it, we update this page and its date. Important changes are also announced by email to account holders. Buying founding member access is covered by our Terms of Sale and Use.