Privacy Policy

1. INTRODUCTION

MyTradeLog ("we," "us," "our," "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

GDPR & CCPA Compliant: We comply with the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

2. INFORMATION WE COLLECT

A. Information You Provide Directly

Account Information

• Email address
• Password (hashed, never stored in plain text)
• Profile information (experience level, trades size category)

Wallet & Trading Data

• Wallet address(es) (read-only access)
• Transaction history from blockchain
• Trade entry/exit prices and tokens
• Trade reflections and notes
• Win/loss records

Payment Information

• We do NOT store credit card data. Payment processing is handled by Stripe
• See Stripe's Privacy Policy: https://stripe.com/privacy
• We store: billing email, subscription tier, transaction history

Communication Data

• Emails you send to support
• Chat messages if you use our analysis features
• Feedback and surveys you submit

B. Information Collected Automatically

Website Usage

• IP address
• Browser type and version
• Pages visited and time spent
• Referrer URL
• Device information (operating system, device type)
• Cookies and similar tracking technologies

Service Usage Analytics

• Analysis requests made
• Features used
• Errors or bugs encountered
• How long you use the service
• User journey and conversion points

Blockchain Data

• We query public blockchain APIs (Moralis) to verify wallet ownership
• Wallet age, transaction count, portfolio diversity
• This data is public on the blockchain; we do not create this data

3. HOW WE USE YOUR INFORMATION

Primary Uses

1. Service Delivery: Analyze your trades, generate AI insights, provide recommendations
2. Account Management: Maintain your account, process payments, send billing information
3. Communication: Send transactional emails (verify email, password reset, analysis ready)
4. Support: Respond to support requests and troubleshoot issues
5. AI Improvement: Use anonymized data to improve our AI models

Secondary Uses

1. Analytics: Understand user behavior, identify trends, measure success metrics
2. Marketing: Send optional newsletters about features and updates (you can unsubscribe anytime)
3. Legal & Safety: Comply with laws, prevent fraud, protect our rights
4. Research: Academic research on trading patterns (anonymized only)

What We Do NOT Do

• ❌ Sell your personal data to third parties
• ❌ Sell your trade data to trading platforms or data brokers
• ❌ Use your data for targeted advertising
• ❌ Share your data without your consent (except as required by law)

4. DATA RETENTION

After Account Deletion

• Personal data deleted within 30 days
• Trade data deleted within 30 days
• Anonymized data retained (cannot be linked to you)
• Payment records retained for 7 years (tax law requirement)

5. DATA SECURITY

How We Protect Your Data

• Encryption in Transit: All data uses HTTPS/TLS encryption
• Encryption at Rest: Sensitive data encrypted in our database
• Access Controls: Only authorized employees access customer data
• API Keys: Stored securely, never hardcoded
• Regular Audits: Third-party security assessments

What We Cannot Guarantee

• No security system is 100% secure
• If we detect a breach, we will notify affected users within 72 hours
• You are responsible for protecting your password

6. YOUR RIGHTS (GDPR & CCPA)

GDPR Rights (EU Residents)

1. Right to Access: Request a copy of your data
2. Right to Rectification: Correct inaccurate data
3. Right to Erasure: Request deletion ("right to be forgotten")
4. Right to Restrict Processing: Limit how we use your data
5. Right to Data Portability: Receive your data in a portable format
6. Right to Object: Opt-out of certain processing
7. Right to Lodge a Complaint: With your data protection authority

CCPA Rights (California Residents)

1. Right to Know: What data we collect and how we use it
2. Right to Delete: Request deletion of your data
3. Right to Opt-Out: Opt-out of data selling (we don't sell, but you can opt-out)
4. Right to Correct: Correct inaccurate information
5. Right to Non-Discrimination: We won't discriminate against you for exercising rights

7. THIRD-PARTY SERVICES

We use third-party services that access your data:

We are not responsible for third-party privacy practices. Review their policies before using our Service.

8. COOKIES & TRACKING TECHNOLOGIES

What Are Cookies?

Small text files stored on your device that track your activity.

Our Use of Cookies

• Essential Cookies: Login sessions, security (required)
• Analytics Cookies: Google Analytics to understand user behavior (optional)
• Preference Cookies: Remember your settings (optional)

How to Control Cookies

• Most browsers allow you to disable cookies
• Some features may not work if cookies are disabled
• See "Privacy Controls" section below

9. PRIVACY CONTROLS

Email Preferences

• Transactional Emails: Required (account & payment confirmations)
• Weekly Report: Optional (you can disable in Account Settings)
• Marketing Emails: Optional (we'll ask for consent; unsubscribe anytime)
• Unsubscribe: Click the unsubscribe link in any email

Data Collection Preferences

• Analytics: Disable in Account Settings (but we'll still collect basic usage)
• Wallet Scanning: You control which wallets we analyze
• AI Improvement: Opt-out if you don't want your anonymized data used for model training

10. CHILDREN'S PRIVACY

MyTradeLog is NOT intended for users under 18 years old.

• We do not knowingly collect data from minors
• If we discover we've collected data from a minor, we will delete it immediately

11. INTERNATIONAL DATA TRANSFERS

GDPR Compliance

• We comply with GDPR data transfer mechanisms
• We use Standard Contractual Clauses (SCCs) for international transfers
• Your data is protected under the same standards

Your Consent

By using this Service, you consent to transfer of your data internationally.

12. PRIVACY POLICY CHANGES

• We may update this Privacy Policy anytime
• We will notify you of material changes via email (30 days notice)
• Continued use = acceptance of the new policy