1. Introduction
TradeJour.nl ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
By using TradeJour.nl, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Name
- Email address
- Password (encrypted)
- Account tier (Free, Starter, Pro)
2.2 Trading Data
When you use our service, we collect and store:
- TradingView screenshots you upload
- Extracted trade data (currency pairs, entry/exit prices, etc.)
- Trade notes and summaries
- Tags and custom fields
- Journal names and descriptions
2.3 Usage Information
We automatically collect:
- IP address
- Browser type and version
- Device information
- Pages visited and features used
- Upload counts and timestamps
3. How We Use Your Information
We use your information to:
- Provide and maintain our service
- Process your TradingView screenshots using OCR and AI
- Generate trade summaries and insights
- Send you service-related emails (password resets, account notifications)
- Monitor usage and enforce tier limits
- Improve our service and develop new features
- Detect and prevent fraud or abuse
4. Data Storage and Security
4.1 Storage Location
Your data is stored on secure servers provided by:
- Vercel (hosting and serverless functions)
- Supabase (PostgreSQL database)
- Vercel Blob Storage (uploaded screenshots)
4.2 Security Measures
We implement security measures including:
- Encrypted HTTPS connections
- Password hashing using bcrypt
- Rate limiting to prevent abuse
- File signature validation for uploads
- Content Security Policy (CSP) headers
- Regular security audits
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
5. Third-Party Services
We use the following third-party services to operate, improve, and secure the Service. Each service may collect and process your data according to their own privacy policies.
5.1 AI and OCR Processing
- Google Cloud Vision API — OCR text extraction from your uploaded screenshots
- Anthropic Claude API — AI-powered trade analysis and summaries
- Google Gemini API — Chart annotation extraction
5.2 Payments
- Stripe — Payment processing, subscription management, and billing. Stripe collects payment card details directly; we never store your full card number.
5.3 Email
- Resend — Transactional and marketing email delivery. Resend tracks email delivery status, opens, and clicks on our behalf to ensure deliverability and improve communications.
5.4 Analytics and Monitoring (consent required)
- PostHog — Product analytics, session recording (with input masking), heatmaps, and feature usage tracking. Data is stored in the EU. Only active with your consent.
- Google Analytics 4 — Website traffic and usage analytics. Only active with your consent.
- Vercel Analytics — Web analytics for page views and visitor patterns. Only active with your consent.
5.5 Affiliate Programme (opt-in only)
- FirstPromoter — Affiliate tracking and payout management. If you choose to join our affiliate programme, your name and email address are shared with FirstPromoter solely to operate the programme and process commission payouts. This data sharing only occurs when you explicitly opt in; it does not apply to users who have not joined the programme. FirstPromoter's privacy policy is available at firstpromoter.com/privacy.
5.6 Infrastructure and Security
- Vercel — Application hosting and serverless functions
- Supabase — PostgreSQL database hosting
- Vercel Blob Storage — Secure storage for uploaded screenshots
- Upstash Redis — Rate limiting to prevent abuse
- Vercel Speed Insights — Performance monitoring (Core Web Vitals, no behavioural tracking)
- Sentry — Error tracking and performance monitoring for service reliability
6. Data Sharing
We do not sell your personal information. We may share your data only in the following cases:
- With your explicit consent (e.g., when you make a trade public)
- With third-party service providers who help us operate our service
- When required by law or to protect our legal rights
- In connection with a merger, acquisition, or sale of assets
7. Your Rights (GDPR)
If you are in the European Economic Area (EEA), you have the following rights:
- Right to Access - Request a copy of your personal data
- Right to Rectification - Correct inaccurate data
- Right to Erasure - Delete your account and data
- Right to Data Portability - Export your data
- Right to Object - Object to data processing
- Right to Withdraw Consent - Withdraw consent at any time
To exercise these rights, please contact us at privacy@tradejour.nl.
8. Data Retention
We retain your data as follows:
- Active accounts - Data retained indefinitely while your account is active
- Deleted accounts - All personal data and uploaded files are permanently deleted within 30 days
- Backups - Backup copies may persist for up to 90 days
9. Cookies and Tracking
9.1 Cookie Consent
We use a cookie consent mechanism that allows you to control which non-essential cookies are set. You can manage your preferences at any time by clicking "Cookie Settings" in the website footer.
9.2 Essential Cookies
These cookies are necessary for the Service to function and cannot be disabled:
- Session cookie — Maintains your login session (NextAuth)
- CSRF token — Protects against cross-site request forgery attacks
- Theme preference — Remembers your light/dark mode choice
- Cookie consent preference — Stores your cookie consent decision
9.3 Analytics Cookies (consent required)
These cookies help us understand how you use TradeJour and are only set with your explicit consent:
- PostHog — Session recording (with all form inputs masked), heatmaps, page views, and feature usage analytics. Data stored in the EU.
- Google Analytics 4 — Website traffic analytics, page views, and user journey analysis
- Vercel Analytics — Page view and visitor pattern analytics
9.4 Marketing Cookies
We do not currently use marketing or advertising cookies. If we introduce them in the future, they will require your explicit consent before being set.
9.5 How to Manage Cookies
You can manage cookies in several ways:
- Use our cookie consent tool (click "Cookie Settings" in the footer)
- Adjust your browser settings to block or delete cookies
- Use browser extensions that manage cookie preferences
Note that blocking essential cookies may prevent the Service from functioning correctly.
10. Email Engagement Tracking
We track email delivery, opens, and clicks through our email provider (Resend) to ensure deliverability and improve communications. This applies to:
- Transactional emails (password resets, payment receipts, account notifications)
- Marketing emails and newsletters (if you have opted in)
If you wish to disable email open/click tracking, please contact us at privacy@tradejour.nl.
11. Your Rights (CCPA — California Residents)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know — Request details about the categories and specific pieces of personal information we have collected about you
- Right to Delete — Request deletion of your personal information
- Right to Opt-Out of Sale — We do not sell your personal information to third parties
- Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights
To exercise these rights, contact us at privacy@tradejour.nl.
12. Children's Privacy
Our service is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Continued use of the service after changes indicates your acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy, please contact us: