Skip to main content

Privacy Policy

Last updated: May 18, 2026

1. Information We Collect

When you create an account, we collect your name, email address, and authentication credentials through our authentication provider (Clerk). When you subscribe to a paid plan, payment information is processed securely by Stripe — we never store your credit card details on our servers.

We also collect the trading data you voluntarily enter, including trade entries, journal notes, chart images, and portfolio information.

We automatically collect certain technical information when you use the Service, including IP address, browser type, device type, operating system, and usage patterns (pages visited, features used, timestamps). This data is used solely for service operation and improvement.

2. How We Use Your Information

  • To provide and maintain the MarketJournal service
  • To process your subscription and payments
  • To generate AI-powered trade analysis and coaching
  • To send important account notifications
  • To improve our service, fix issues, and prevent abuse
  • To enforce our Terms of Service and protect against fraud
  • To comply with legal obligations

We do not use your personal information for advertising purposes. We do not build advertising profiles based on your trading data or activity.

3. AI Data Processing

When you use AI-powered features (chart analysis, trade analysis, coaching), your relevant trading data and chart images are sent to OpenAI for processing. This data is sent solely to generate your requested analysis and is subject to OpenAI's data usage policies. We do not use your trading data to train AI models. You can choose not to use AI features, in which case your data will not be sent to OpenAI.

4. Data Storage and Security

Your data is stored securely in a PostgreSQL database hosted by Supabase. Chart images are stored in Amazon S3. All data is transmitted over HTTPS using TLS encryption. We implement industry-standard security measures including authentication, rate limiting, input validation, and access controls.

While we take reasonable measures to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5. Third-Party Services

We use the following third-party services that may process your data:

  • Clerk — authentication and user management
  • Stripe — payment processing
  • Supabase — database hosting
  • Amazon Web Services — chart image storage
  • OpenAI — AI trade analysis and coaching
  • Vercel — application hosting and analytics

Each third-party service has its own privacy policy governing its use of your data. We encourage you to review their respective policies. We are not responsible for the privacy practices of these third-party services.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Your trading data is private and only accessible to you. We share data with third-party services only as necessary to provide the MarketJournal service (as listed above).

We may disclose your information if required to do so by law, court order, or government request, or if we believe in good faith that disclosure is necessary to: (a) comply with legal obligations; (b) protect our rights or property; (c) prevent fraud or abuse; or (d) protect the safety of our users or the public.

7. Data Retention and Deletion

Your data is retained for as long as your account is active. You may request deletion of your account and all associated data by contacting us at supportmarketjournal@gmail.com. Upon account deletion, your data will be permanently removed from our systems within 30 days. Some data may be retained longer if required by law or for legitimate business purposes (e.g., billing records, fraud prevention).

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Third-party services integrated into our platform may set their own cookies as described in their respective privacy policies.

9. Your Rights — California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to Know — You may request details about the personal information we collect, use, and disclose.
  • Right to Delete — You may request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out — We do not sell your personal information. If this changes, we will provide an opt-out mechanism.
  • Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at supportmarketjournal@gmail.com. We will respond to verifiable requests within 45 days.

10. Your Rights — EEA/UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

  • Access — Request a copy of the personal data we hold about you.
  • Rectification — Request correction of inaccurate or incomplete data.
  • Erasure — Request deletion of your personal data.
  • Restriction — Request restriction of processing of your data.
  • Portability — Request your data in a structured, machine-readable format.
  • Objection — Object to processing of your personal data.

Our legal basis for processing your data is: (a) performance of a contract (providing the Service); (b) your consent (AI features, optional data); and (c) legitimate interests (security, fraud prevention, service improvement). To exercise your rights or lodge a complaint, contact us at supportmarketjournal@gmail.com.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

12. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to countries that may have different data protection laws than your country of residence.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by posting the updated policy on this page with a revised date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy. We encourage you to review this page periodically.

14. Contact

If you have questions about this privacy policy, your data, or wish to exercise your privacy rights, contact us at supportmarketjournal@gmail.com.