Privacy Policy

This policy explains what Trading Journal collects when you use Trading Journal, why we collect it, and what you can do about it. We have tried to write it in plain language rather than legal padding.

1.What we collect

You give us

• Account details — your name, email address, and phone number if you provide one.
• Your journal — the trades, notes, tags and chart screenshots you enter.

Collected automatically

• Login records — the date, IP address and browser of each sign-in, so you and we can spot access you did not expect.
• A session cookie — one cookie that keeps you logged in. We use no advertising or tracking cookies and run no third-party analytics.

From our payment provider

• Payment records — the amount, date, payment method type, and the Razorpay order and payment identifiers.

2.Why we hold it

• To create your account and let you log in.
• To store and display the journal you have entered.
• To take payment and give you access to the plan you bought.
• To send you the things you would expect: a receipt, a password reset link when you ask for one, and a reminder before your plan runs out.
• To keep the Service secure and to investigate misuse.
• To meet our tax and accounting obligations.

We do not use your data to train any model, and we do not build advertising profiles.

3.Who else sees it

We share the minimum necessary with the services that make the product work:

• Razorpay — your name, email and phone are passed to the payment window so your payment can be processed and receipted.
• Our email provider — your email address, so receipts, reset links and reminders can be delivered.
• Our WhatsApp provider — your phone number, only if you gave one and only to deliver payment confirmations and renewal reminders.

Beyond these, we disclose personal data only where the law requires it. We never sell your data, and we never share your trades with anyone.

4.Where it is stored and for how long

Your data is held in our application database. Passwords are stored as bcrypt hashes and can never be read back. Payment and messaging credentials belonging to the business are encrypted at rest.

• Account and journal data — kept while your account exists, and deleted when you ask us to close it.
• Payment records — kept for as long as tax and accounting law requires, which in India is generally eight years.
• Login sessions — expire on their own, and are cleared when you change your password or log out everywhere.

5.Your rights

Under the Digital Personal Data Protection Act, 2023 and general practice, you may:

• See what we hold — most of it is visible in your account, and you can ask for the rest.
• Take it with you — export to CSV or download a full backup from inside the app, without asking anyone.
• Correct it — edit your profile and your trades yourself at any time.
• Have it deleted — ask us and we will delete your account and journal. Payment records we are legally required to keep will remain.
• Withdraw consent — stop the WhatsApp messages by removing your number from your profile, or write to us.

6.Security

We take reasonable measures to protect your information: passwords are hashed with bcrypt, session tokens are random and stored server-side, business API keys are encrypted at rest, and payments are verified by cryptographic signature before any access is granted.

No system is perfectly secure. Please use a password you do not use elsewhere, and tell us immediately if you suspect a problem with your account.

7.Children

The Service is not intended for anyone under 18 and we do not knowingly collect their data. If you believe a minor has created an account, please tell us and we will remove it.

8.Changes to this policy

If we change how we handle data we will update this page and change the date at the top. Where a change is significant we will tell account holders by email.

9.Contact