Privacy Policy

1. Introduction

TradeDisciple ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Please read this policy carefully. By using TradeDisciple, you consent to the practices described here. If you do not agree with the terms of this Privacy Policy, please discontinue use of the platform.

2. Information We Collect

2a. Information you provide directly

• Name and email address — provided at account registration
• Password — stored in hashed form only; we never store your plaintext password
• Payment information — processed exclusively by Stripe; we never store raw card data on our servers
• Trading journal entries — notes, trade records, and analysis you enter into the platform
• Account preferences — instrument selections, risk settings, and other configuration

2b. Information collected automatically

• IP address — captured at connection time for security and fraud prevention
• Browser type and device information — user agent, operating system, screen resolution
• Usage data — pages visited, features used, session duration, click patterns
• Cookies and similar tracking technologies — see Section 5 for details

2c. Information from third parties

• Clerk — authentication data, session tokens, and user identity verification
• Stripe — subscription status, billing history, and payment confirmation signals

3. How We Use Your Information

We use collected information to:

• (a) Provide and operate the platform — deliver signals, journal tools, risk calculators, and AI analysis features
• (b) Process payments and manage subscriptions — via Stripe, including handling upgrades, downgrades, and cancellations
• (c) Authenticate your identity — via Clerk, to secure your account and enforce access controls
• (d) Generate AI-powered analysis — via Anthropic's Claude API; your journal entries and signal data may be sent to Anthropic's API for processing when you request AI analysis
• (e) Send transactional emails — account confirmations, payment receipts, and security notifications
• (f) Improve the platform — through aggregated usage analytics and performance monitoring
• (g) Comply with legal obligations — including financial recordkeeping requirements and law enforcement requests
• (h) Respond to support inquiries — to diagnose issues and assist you effectively

4. Sharing of Information

We do not sell your personal data. We do not rent or trade it. We share data only with the following categories of third parties, and only to the extent necessary to operate the platform:

• Clerk — for authentication, user management, and session handling
• Stripe — for payment processing, subscription management, and fraud prevention
• Anthropic — for AI analysis of trade journal and signal content that you explicitly submit for AI processing
• Vercel — our cloud hosting provider, which processes data incidentally through infrastructure operation
• Legal authorities — when required by applicable law, court order, or government regulation, or to protect the rights and safety of TradeDisciple and its users

All third-party processors are contractually bound to protect your data and may only use it for the specific purposes for which it was shared.

5. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

• Session management — to keep you logged in across page loads
• Authentication — Clerk sets secure session cookies to verify your identity
• Basic analytics — to understand how the platform is used in aggregate, with no personally identifying information exposed to analytics systems

You can control cookie preferences through your browser settings. Note that disabling cookies will impair or prevent authentication, which is required for platform access.

6. Data Retention

• Account data — retained for as long as your account is active
• Journal entries and trading data — retained until you delete them manually or close your account
• Post-deletion — after account deletion, we may retain anonymized, aggregated data for analytics purposes; no personally identifiable information is retained
• Payment records — retained as required by financial regulations, typically 7 years, regardless of account status

To request deletion of your account and associated data, email hello@tradedisciple.com. We will process deletion requests within 30 days, subject to legal retention requirements.

7. Your Rights

Depending on your jurisdiction and applicable law, you may have the right to:

• (a) Access — request a copy of the personal data we hold about you
• (b) Correction — request correction of inaccurate or incomplete data
• (c) Deletion — request deletion of your personal data ("right to be forgotten"), subject to legal obligations
• (d) Data portability — request your data in a structured, machine-readable format
• (e) Withdraw consent — at any time, where processing is based on consent
• (f) Opt out of marketing — unsubscribe from non-transactional communications at any time

To exercise any of these rights, contact us at hello@tradedisciple.com. We will respond within 30 days.

8. CCPA Rights (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know — the categories and specific pieces of personal information we have collected about you
• Right to delete — request deletion of personal information we have collected, subject to certain exceptions
• Right to opt out of sale — we do not sell personal information; this right is not implicated by our practices
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights

To exercise your CCPA rights, contact us at hello@tradedisciple.com with the subject line "CCPA Request."

9. Data Security

We implement industry-standard security measures to protect your information, including:

• Encrypted data transmission — all data is transmitted over HTTPS/TLS
• Hashed password storage — managed by Clerk using industry-standard cryptographic hashing
• PCI-compliant payment processing — card data is handled exclusively by Stripe, a PCI Level 1 certified processor
• Regular security reviews — ongoing monitoring and assessment of platform security

10. Children's Privacy

TradeDisciple is not directed to children under the age of 18. Futures trading carries significant financial risk and is not appropriate for minors. We do not knowingly collect personal information from anyone under 18.

If you believe we have inadvertently collected personal data from a minor, please contact us immediately at hello@tradedisciple.com and we will take steps to delete such information promptly.

11. International Transfers

TradeDisciple is operated from the United States. Our servers, third-party processors (Clerk, Stripe, Anthropic, Vercel), and personnel are primarily based in the United States.

If you access the platform from outside the United States, your personal data will be transferred to and processed in the United States. Data protection laws in the US may differ from those in your country. By using TradeDisciple, you consent to this transfer and processing in accordance with this Privacy Policy.

12. Third-Party Links

Our platform may contain links to third-party websites, including brokers, prop trading firms, and financial data providers. These links are provided for informational purposes only.

We are not responsible for the privacy practices, content, or security of any third-party sites. We encourage you to review the privacy policy of any third-party site before providing personal information. This Privacy Policy applies solely to TradeDisciple.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users by email
• Post a notice within the platform for a reasonable period following the change

Your continued use of TradeDisciple after changes are posted constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated policy, you should discontinue use and may request deletion of your account.

14. Contact Us

For any privacy-related questions, data requests, or concerns, please contact us: