Privacy Policy

Last updated: [EFFECTIVE DATE]

This policy explains what Tradepilot collects, why we collect it, who we share it with, and the choices you have. Tradepilot is run by [LEGAL ENTITY: Graystone Trading LLC, or the entity that will own Tradepilot] ("we", "us", "our"). We decide how your personal data is used, which makes us its "controller" under data protection law.

It covers tradepilot.net, the Tradepilot app and the emails we send. Our Terms of Service cover the rest of our agreement with you.

1. What we collect

Information you give us

• Account details. Your email address. If you sign in with Google, also your name and profile photo. Our sign-in provider, Clerk, holds those. Our own database keeps only your email address.
• Your trades. Trades you import from a file, sync from your broker or enter by hand: the symbol, type of instrument, direction, times, quantity, prices, profit or loss, risk-to-reward, and any tags, grades and notes you add.
• Your journal. Your daily plans and reviews, including anything you write in them and the structured parts, such as your bias, loss limits, checklist and daily grade.
• Your setup. Your trading rules, your prop firm accounts (firm, phase, profit target and drawdown limits) and your settings, such as time zone, goals and display choices.
• What you tell us. Emails you send us. If you tell us why you're cancelling, that note is stored with your subscription at Stripe.

Information from your broker, if you connect one

Connecting a broker is optional. It works through SnapTrade and is read-only. With your permission, we receive:

• the name of your brokerage, your account names and the last four digits of each account number;
• your executed orders: symbol, side, quantity, price and time. We turn these into trades in your journal.

You sign in on your broker's own page, so we never see your broker password. SnapTrade gives us an access key for your connection, which we store encrypted. The connection can't place, change or cancel orders, and it can't move money.

Payment information

Payments are handled by Stripe. Your card details go straight to Stripe and never reach our servers. We keep your Stripe customer and subscription numbers, whether your subscription is active, and when it renews.

Information collected automatically

• Sign-in and security. Clerk records each sign-in along with your IP address, approximate location, browser and device, to protect your account. It may use Cloudflare Turnstile to keep bots off the sign-up form.
• Server logs. Our server logs each request it handles: what was requested, the result, how long it took and your internal account number. Our hosting providers, Render and Cloudflare, see your IP address when you connect and may log it for security.
• Error reports. When something breaks, we send a report to Sentry with technical details of the error and your internal account number. We don't include your email address.
• Usage counts. How many AI Coach questions and manual broker syncs you've used each day, so we can apply the daily limits.

We don't use analytics, advertising or tracking tools.

2. How we use it

We use your information only for the purposes below. If you're in the EU, EEA or UK, the law asks us to name a legal basis for each one, so we've added it.

We don't send marketing emails. If that changes, we'll ask first where the law requires it, and every marketing email will have a one-click unsubscribe link.

3. The AI features

Tradepilot's AI features use Claude, an AI model made by Anthropic.

• AI Coach. When you ask a question, we send Anthropic your question together with the data needed to answer it: summary statistics, up to your 100 most recent trades (including their tags and notes), your recent journal plans and reviews, your trading rules and your latest AI Insights. Anthropic sends back the answer and we show it to you. We don't store your questions or the answers, only a count for the daily limit.
• AI Insights. We first find patterns in your trades ourselves, such as how trades taken right after a loss turn out. We send Anthropic those findings and some summary numbers, and it writes them up in plain language. We save the result in your account so it doesn't have to be written again.

Anthropic processes this data on our behalf. Its commercial terms don't allow it to use this data to train its AI models. It may keep the data for a limited time under its own policies, for example to detect misuse.

AI answers are written by a machine and can be wrong. Tradepilot doesn't use AI, or anything else, to make decisions about you that have legal or similarly significant effects.

4. Who we share it with

We don't sell your personal data, and we don't share it for advertising. We share it only in the cases below.

Service providers

These companies help us run Tradepilot. They act on our instructions and may use your data only to provide their service to us, except where noted.

Our team

A small number of authorized people at [LEGAL ENTITY] can see your account details (email address and subscription status) and a summary of your activity (number of trades, total profit or loss, your five most recent trades and your connected brokers), to give support and run the service. Access to anything more is limited to what's needed to fix a problem or answer your request.

Legal reasons and business changes

We may disclose data if the law requires it, for example in response to a court order, or to protect the rights, property or safety of our users, the public or ourselves. If Tradepilot is sold or merges with another company, your data may move with it. We'll tell you before it becomes subject to a different privacy policy.

5. Cookies and local storage

We use only what's needed to make Tradepilot work:

• Sign-in cookies from Clerk keep you signed in and protect your account.
• Local storage in your browser remembers display choices, such as light or dark mode and how many rows a table shows. It stays on your device.

Some other companies set their own cookies when you use their part of Tradepilot: Stripe on its checkout and billing pages, and TradingView in the chart on the TradingView page. Their own policies cover those cookies.

Because our own cookies are only the ones needed to provide the service you asked for, we don't show a cookie banner.

6. International transfers

We and our service providers store and process data in the United States and other countries. If you're in the EU, EEA, UK or Switzerland, this means your data leaves your region. When it does, we rely on legal safeguards: the EU-US Data Privacy Framework (and its UK and Swiss extensions) where a provider is certified under it, or the European Commission's Standard Contractual Clauses. You can ask us for details.

7. How long we keep it

• Your account and trading data: for as long as you have an account. You can delete individual trades, imports, journal entries, rules, prop firm accounts and broker connections in the app at any time.
• If you delete your account: when you do it in the app (Manage account, then Billing, then Delete account), your data is deleted straight away. If you ask us by email, we delete it within 30 days. Copies in our database backups disappear as those backups expire, within [BACKUP WINDOW: e.g. 7] days after that.
• Broker connections: when you disconnect a broker, we end the connection at SnapTrade and remove it from your account. Trades it already synced stay in your journal until you delete them.
• Billing records: as long as tax and accounting laws require, which can be up to [7] years.
• Logs and error reports: normally no longer than 30 days, unless we need them longer to investigate a security problem.
• AI Coach questions: we don't keep them. Section 3 explains what Anthropic keeps.

8. Security

We protect your data with:

• encrypted connections (HTTPS) everywhere;
• broker access keys encrypted in our database;
• card payments handled entirely by Stripe;
• optional two-step verification when you sign in;
• access to production data limited to the people who need it.

No system is perfectly secure. If a breach affects your personal data, we'll tell you and the authorities when the law requires it.

9. Your rights

Everyone can:

• see and change most of their data directly in the app;
• download their trades as a CSV file;
• delete individual records in the app;
• delete their whole account in the app, under Manage account, then Billing;
• ask us for a copy of their data, or to delete their account, by emailing [CONTACT EMAIL].

If you're in the EU, EEA or UK, you also have the right to:

• get a copy of your personal data;
• have it corrected if it's wrong;
• have it deleted;
• limit how we use it;
• receive it in a format you can take to another service;
• object to uses based on our legitimate interests;
• complain to a data protection authority, either [LEAD AUTHORITY if we're established in the EU, e.g. Integritetsskyddsmyndigheten (IMY), Sweden] or the authority where you live or work.

If you're in the United States, some state laws, such as California's, give you the right to know what personal information we collect, and to correct or delete it. We don't sell personal information or share it for cross-context behavioral advertising, and we won't treat you differently for using your rights.

To use any of these rights, email [CONTACT EMAIL]. We'll answer within one month. We may need to confirm it's really you before we act.

10. Children

Tradepilot is for adults. You must be at least 18 to use it. We don't knowingly collect data from anyone younger. If you think a child has given us personal data, email us and we'll delete it.

11. Changes to this policy

We'll post any changes on this page and update the date at the top. If a change is significant, we'll tell you by email or in the app before it takes effect.

12. Contact us

[LEGAL ENTITY]
[REGISTERED ADDRESS]
Email: [CONTACT EMAIL: e.g. support@tradepilot.net, once the mailbox exists]