Privacy Policy

Last updated: April 19, 2026

1. Introduction

TradeJournal Lab ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading journal platform at tradejournallab.com (the "Service").

2. Information We Collect

2.1 Personal Information

When you register, we collect your name, email address, and password (hashed). If you subscribe to a paid plan, payment is processed via cryptocurrency on our website — we never store credit card numbers or payment credentials.

2.2 Trading Data

You may provide trade entries, screenshots, notes, strategies, and other trading-related data. This data is stored securely and is only accessible to you (and your designated mentors, if applicable).

2.3 Broker Credentials

If you connect a broker (e.g., Binance), API credentials are encrypted using AES-256-CBC encryption before storage. We only use read-only permissions to sync trade history.

2.4 Usage Data

We automatically collect information about your device, browser, IP address, and how you interact with the Service for analytics and security purposes.

3. How We Use Your Information

  • To provide and maintain the Service
  • To process your trades and generate analytics
  • To provide AI-powered trade analysis (data sent to AI providers is anonymized)
  • To process payments via Stripe
  • To send important service notifications
  • To detect and prevent fraud and abuse
  • To improve the Service based on usage patterns

4. Data Sharing

We do not sell your personal data. We only share data with:

  • Blockchain Networks: Payment verification via public RPC nodes (Polygon, BSC, Tron). No personal data is shared — only transaction hashes are checked on-chain.
  • AI Providers: For AI trade analysis (anonymized data only)
  • Law enforcement: When required by law

5. Data Security

We implement industry-standard security measures including:

  • HTTPS/TLS encryption for all data in transit
  • AES-256-CBC encryption for sensitive data at rest
  • Bcrypt password hashing
  • CSRF protection on all forms
  • Rate limiting on authentication and API endpoints
  • Two-factor authentication (TOTP) available
  • Auth audit logging for suspicious activity detection

6. Data Retention

Your trading data is retained as long as your account is active. Upon account deletion, all personal data and trading records are permanently deleted within 30 days. Anonymized analytics data may be retained.

7. Your Rights

You have the right to:

  • Access your personal data
  • Export your trading data (CSV/PDF)
  • Correct inaccurate data
  • Delete your account and all associated data — Data Deletion Request
  • Opt out of non-essential communications

8. Cookies

We use essential cookies for session management and authentication. We use localStorage for theme preference (dark/light mode). We do not use third-party tracking cookies.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or in-app notification.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at support@tradejournallab.com.