Privacy Policy
TradeVault is a trading journal. It only works if you put real, personal, sometimes uncomfortable information into it — your trades, your losses, your notes about why you broke your own rules. This page explains exactly what happens to that information, in plain language.
1. Who is responsible for your data
Marek Kosorin, trading as TradeVault (“we”, “us”) is the data controller for the information described here. You can reach us at tradevaultjournals@gmail.com for any privacy question or request, including deletion.
2. What we collect
Information you give us
- Account details — your email address and display name. If you sign up with a password we store a one-way hash of it, never the password itself. If you sign in with Google we receive your email, name and profile picture from Google.
- Your trading data— trades, entry and exit prices, position sizes, P&L, tags, grades, screenshots and chart images you upload, journal entries, daily and weekly reviews, playbooks and strategies, and prop-firm account details you choose to track.
- Community content — posts, replies, likes, reposts, follows, direct messages, your public profile, and any avatar or banner image you upload.
- Support messages — anything you send us through the in-app problem or feature forms, or by email.
Information created by using the service
- Subscription status — your plan, and identifiers from our payment processor so we know what you are entitled to.
- Founding member number, if you have one, and any leaderboard entries or achievements you have opted into publishing.
- Ordinary server logs generated by our hosting provider, which may include IP address, browser type and timestamps. These are used for security and debugging.
What we deliberately do not collect
- No advertising or analytics trackers. There is no Google Analytics, no Meta pixel, no Segment, no session-replay tool and no ad network in this product. We do not build advertising profiles and we do not sell or rent your data to anyone.
- No card numbers.Payment details are entered on our processor's own systems and never touch our servers.
- No brokerage credentials. TradeVault does not connect to your broker and never asks for broker or exchange logins. Anyone claiming otherwise in our name is not us — please report it.
3. Screen sharing in Sentinel
Sentinel, our live session feature, captures frames of the screen or window you choose to share and sends them to our AI provider for immediate analysis, roughly one frame every few seconds while a session is running.
- Sharing only ever starts from your own click, and your browser asks you what to share.
- We do not store those frames. They are analysed in the moment and discarded; only the resulting text feedback and session summary are kept in your account.
- Share a single chart window rather than a whole screen if you want to be certain nothing else is ever captured. Stopping the share stops the capture immediately.
4. Why we use it, and our legal basis
| Purpose | Data used | Legal basis (UK/EU GDPR) |
|---|---|---|
| Run your account | Account details, subscription status | Performance of our contract with you |
| Store and show your journal | Trading data, journal entries, uploads | Performance of our contract with you |
| AI coaching and analysis | The trades and notes relevant to what you asked for | Performance of our contract; you choose when to use it |
| Community features | Profile, posts, messages | Performance of our contract with you |
| Public leaderboards | Derived stats, name or anonymous label | Your consent — opt-in, and withdrawable at any time |
| Take payment | Email, subscription identifiers | Performance of our contract; legal obligation for records |
| Security, abuse prevention, debugging | Server logs | Our legitimate interest in a working, non-abused service |
5. Who else touches your data
We use a small number of specialist providers to run the product. They may only process your data on our instructions, for the purposes below.
| Provider | What it does | What it sees |
|---|---|---|
| Supabase | Database and file storage | Everything you save in your account |
| Vercel | Hosting and delivery | Requests and server logs |
| Anthropic | AI coaching, reviews, Sentinel, chart reading | The content sent for a given request; shared Sentinel frames |
| Stripe | Payments and subscriptions | Your email and payment details you enter with them |
| Optional sign-in | Only that you signed in, if you use it | |
| Resend | Delivering support emails you send us | The message you submitted |
Our AI provider does not use data submitted through its business API to train its models, and we do not permit our providers to use your content for their own purposes.
Market data providers (for candles and the economic calendar) receive only a symbol and a date range. They are never sent anything about you.
We may also disclose data if we are legally required to, or to protect our rights or someone's safety. If our business is ever transferred to someone else, your data may transfer with it, and this policy travels with your data.
6. Where your data goes
Our providers may process data outside your home country, including in the United States. Where that happens for users in the UK or EEA, transfers are covered by the standard safeguards those providers offer, such as Standard Contractual Clauses.
7. How long we keep it
- While your account is open — your journal and community content stay until you delete them or close your account. That is the point of a journal: a trade you logged three years ago is only useful if it is still there.
- After you close your account — we delete or anonymise your personal data within 30 days, except where we must keep something longer.
- Payment and tax records are kept for as long as the law requires, typically six to seven years.
- Backups roll off on their own schedule, normally within 30 days.
8. Your rights
Depending on where you live you have some or all of the following rights. If you are in the UK or EEA you have all of them under GDPR; if you are in California you have comparable rights under the CCPA/CPRA.
- Access — get a copy of what we hold about you.
- Correction — fix anything inaccurate.
- Deletion — have your data erased.
- Portability — receive your data in a machine-readable format.
- Object or restrict — tell us to stop a particular use.
- Withdraw consent — for anything you opted into, such as leaderboards.
- No discrimination — exercising any of these will never get you a worse price or a degraded service.
Email tradevaultjournals@gmail.com and we will respond within 30 days. We never sell personal information, so there is nothing to opt out of on that front.
If you are unhappy with how we handled a request you can complain to your local data protection authority — in the UK, the Information Commissioner's Office.
9. Cookies
We use cookies only to keep you signed in and to remember basic preferences such as your chosen theme. These are strictly necessary for the service to work, so they do not require a consent banner. We do not set advertising or tracking cookies. Blocking cookies will stop you being able to stay signed in.
Some of your settings — including drafts and preferences — are stored locally in your own browser rather than on our servers. Clearing your browser storage will clear them.
10. Security
Data is encrypted in transit. Passwords are stored only as one-way hashes. Access to production data is restricted, and our database rejects direct client access outright — every read and write goes through our server, which checks who you are first. No system is perfectly secure, so please use a strong, unique password. If we ever discover a breach that puts you at risk, we will tell you and the relevant regulator without undue delay.
11. Children
TradeVault is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
12. Changes to this policy
If we change this policy we will update the date at the top. For anything significant — a new category of data, or a genuinely new purpose — we will tell you directly rather than quietly editing this page.
13. Contact
Privacy questions, data requests, or anything that looks wrong: tradevaultjournals@gmail.com. See also our Terms of Service and Risk Disclaimer.