Privacy Policy

1. Introduction

Welcome to TradeLog by COT-Reports ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading journal application.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account Information: Email address, username, and password when you create an account.
• Trading Data: Trade entries, exits, profit/loss, notes, and other trading-related information you input.
• Payment Information: Billing details processed securely through Stripe. We do not store your full credit card information.
• Usage Data: Information about how you use our application, including features accessed and time spent.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Enable authorized personnel to access account data for customer support, technical troubleshooting, and platform maintenance (all access is logged and audited)

4. Data Storage and Security

Your data is stored securely using Supabase (database) and hosted on Vercel (hosting platform), both of which provide enterprise-grade security with data centers in the EU and US. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. When you delete trades from your journal, certain derived data may be retained separately to improve your experience:

• Risk History: Calculated risk values and stop-loss data are preserved so they can be automatically restored when trades are reimported from exchange APIs.
• Decision Analysis: Trade decision quality assessments (good/bad decision indicators) are preserved so they survive trade deletion and reimport.

This derived data is kept solely for your benefit and is automatically linked back to your trades upon reimport. You can request complete deletion of all your data, including these history records, by contacting us through our Contact page.

6. Data Sharing

We do not sell your personal information. We may share your information only in the following situations:

• Service Providers: With third-party vendors who perform services on our behalf: Stripe (payment processing), Supabase (database and authentication), Vercel (hosting and deployment), Sentry (error monitoring and diagnostics), Resend (transactional emails), Finnhub (market data), and Cloudflare Turnstile (bot protection on login, signup, and contact forms).
• Legal Requirements: If required by law or in response to valid legal processes.
• Business Transfers: In connection with any merger, sale of company assets, or acquisition.
• Internal Access: Our authorized staff may view your data and records for customer support, debugging, and service operation. All internal access is logged in our audit system.

7. Your Rights

You have the right to:

• Access and receive a copy of your personal data
• Rectify or update your personal information
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability (export your trading data)

8. Cookies

We use essential cookies to maintain your authentication session (Supabase Auth) and remember your preferences (theme, language). Cloudflare Turnstile may set cookies to assess bot risk during login, signup, and contact form submissions. We do not use cookies for advertising or behavioral tracking purposes.

9. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@cot-reports.com