01 Introduction
This Privacy Policy describes how Tradevada, LLC ("Tradevada," "we," "us," or "our") collects, uses, and shares personal information when you use our website, mobile or desktop applications, APIs, and related services (collectively, the "Service").
By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service. This Policy is incorporated into our Terms of Service.
02 Information We Collect
We collect the following categories of information:
03 How We Use Your Data
We use your information to:
- provide, maintain, secure, and improve the Service;
- create and authenticate your account;
- import, process, and display your trade history and analytics;
- process subscription payments and prevent fraud;
- send transactional emails (account confirmations, billing receipts, security alerts);
- respond to support requests and feedback;
- send product updates or occasional marketing emails if you have opted in, with an unsubscribe link in every such email;
- monitor performance, debug issues, and prevent abuse;
- comply with legal obligations and enforce our Terms.
We do not sell your personal data. We do not share your trade data with third parties for advertising or marketing purposes, and we do not use your trade data to train third-party machine-learning models without your explicit consent.
04 Legal Bases for Processing (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases:
- Contract - to provide the Service you signed up for;
- Legitimate interests - to operate, secure, and improve the Service;
- Consent - for optional marketing communications and non-essential cookies (you can withdraw consent at any time);
- Legal obligation - to comply with tax, audit, fraud-prevention, and other legal requirements.
06 Broker Connections
When you connect a brokerage account, we receive trade and account data only as authorized by you and the broker. We use this data exclusively to populate your Tradevada journal and analytics. We request read-only access whenever the broker permits it, and we never use connections to place trades on your behalf.
You can disconnect a broker at any time from your account settings. After disconnection, we will stop importing new data, but data already imported will remain in your journal until you delete it or your account.
Administrators may receive operational notifications about platform events - including new account creation, brokerage connection events (account count only, not contents), billing events, and system health alerts - for the purpose of operating, supporting, and securing the Service. Administrators do not receive notifications containing your positions, trades, or financial performance.
07 Payment Information
All payments are processed by Stripe, Inc. We never receive or store your full payment card number, CVC, or full bank account number. Stripe handles your payment data in accordance with its own privacy policy and PCI-DSS compliance program.
We retain limited billing information (last 4 digits, card brand, expiration, billing address) to display your payment method, send receipts, and prevent fraud.
09 Data Retention
We keep your personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:
- Account & trade data - retained for the lifetime of your account. When you delete your account, your trades, journal, broker connections, settings, playbooks and backtests are erased immediately - not queued for later deletion. What briefly remains is listed below: a security-log record that the deletion happened (your email is stored only as a one-way hash, never in the clear), and encrypted backups. Both fall off within 90 days. Billing records are retained separately, as set out below, and we may retain data where a legal hold applies.
- Billing records - retained for 7 years for tax and accounting compliance.
- Logs & security events - retained for up to 90 days.
- Backups - encrypted backups may persist for up to 90 days after deletion.
10 Your Rights & Choices
You have the following rights with respect to your personal information:
- Access - ask what personal data we hold about you;
- Correction - update inaccurate or incomplete information;
- Deletion - request that we delete your account and personal data;
- Export - download a copy of your trade history and account data in a machine-readable format anytime from Settings → Your data → Export my data, or by contacting support;
- Restriction & objection - restrict or object to certain processing activities;
- Marketing opt-out - unsubscribe from marketing emails at any time using the link in each email.
To exercise these rights, email support@tradevada.com. We will respond within the time required by applicable law (typically 30 days). We will not discriminate against you for exercising these rights.
11 California Residents (CCPA / CPRA)
If you are a California resident, you have the rights described in Section 10, plus the right to know what categories of personal information we collect, sell, or share. We do not sell or share personal information for cross-context behavioral advertising as defined under the CCPA/CPRA.
To exercise your rights, contact support@tradevada.com. You may also designate an authorized agent to make a request on your behalf, subject to identity verification.
12 EEA, UK & Swiss Residents
If you are in the EEA, the UK, or Switzerland, you have additional rights under the GDPR, UK GDPR, or FADP, including the right to lodge a complaint with your local supervisory authority. We will cooperate with any investigation.
Our designated representative for GDPR matters can be contacted at support@tradevada.com.
13 Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your data, including:
- encryption in transit (TLS) for all traffic, and encryption at rest for sensitive credentials such as broker tokens and notification keys;
- hashed and salted password storage (bcrypt, work factor 12);
- row-level data isolation between accounts, role-based access control, and audit logging;
- least-privilege access provisioning for internal systems;
- incident-response procedures with user notification where required by law.
No system can be 100% secure. If we learn of a security breach affecting your personal information, we will notify you and the appropriate authorities as required by law.
14 International Data Transfers
Tradevada is operated from Texas, United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. and other jurisdictions where our service providers operate. Where required, we use Standard Contractual Clauses or other lawful transfer mechanisms to protect your data.
15 Children's Privacy
The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, please contact support@tradevada.com and we will delete it promptly.
16 Third-Party Links
The Service may contain links to third-party websites and services (such as broker login pages, news sources, or payment processors). This Privacy Policy does not cover those third parties' privacy practices. We encourage you to review their privacy policies before providing them with information.
17 Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the Service before the changes take effect. The "Last updated" date at the top reflects when the policy was most recently changed.
18 Contact & Data Protection Officer
Questions, requests, or complaints about your privacy? Get in touch:
- Email us at support@tradevada.com
Tradevada, LLC · Texas, USA