Privacy Policy
Effective date: 3 August 2026
This Privacy Policy explains how Tradesef ("we", "us", "our") collects, uses, and protects your personal data when you use our web application (the "Service"). It is written to comply with the EU General Data Protection Regulation (GDPR) and applicable Dutch law, and includes information for users in the United States.
Data controller: Tradesef, KvK-42139478, the Netherlands. Contact: media.freling@gmail.com.
1. Data we collect
You provide directly:
- Account data: email address and password (passwords are stored only in hashed form by our authentication provider).
- Profile data from Google, if you sign in with Google: your name, email address, and profile picture.
- Prop firm account data you enter: account sizes, balances, challenge/rule details, journal entries, goals and commitments, and messages you send to the AI assistant.
When you connect a trading account (optional):
- Read-only account data from the trading platform you connect, such as balance, equity, open positions and trade history, and the credentials or authorisation tokens needed to read that account. We access this on a read-only basis and do not place trades.
Collected automatically:
- Technical and usage data such as log data, device/browser information, and diagnostic data used to keep the Service secure and working.
- Cookies and similar technologies (see our Cookie Policy).
Payment data:
- When you subscribe, your payment is processed by Stripe. We do not receive or store your full card number. We receive limited billing information (such as subscription status and a customer reference) needed to manage your subscription.
We do not intentionally collect special categories of data, and we do not knowingly collect data from anyone under 18.
2. Why we use your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and manage your account and provide the Service | Performance of a contract |
| Process subscriptions and payments | Performance of a contract |
| Read and display data from a trading account you connect | Your consent (given by connecting the account) |
| Keep the Service secure, prevent abuse, and fix errors | Our legitimate interests |
| Non-essential cookies and analytics | Your consent |
| Comply with legal obligations (e.g. accounting) | Legal obligation |
You can withdraw consent at any time (for example by disconnecting a trading account or changing your cookie choices); this does not affect processing done before withdrawal.
3. Who we share data with (processors and third parties)
We use trusted service providers who process data on our behalf under data-processing agreements. These currently include:
- Supabase — database, authentication and storage of your account and app data.
- Vercel — hosting of the application.
- Stripe — payment and subscription processing.
- Google — sign-in with Google (only if you choose it).
- Cloudflare — domain, DNS, and security/network layer.
- Sentry — error and crash monitoring (hosted in the EU).
- Trading platform providers — only if you connect a trading account, to read that account's data.
We do not sell your personal data. We only share data with these providers to the extent needed to run the Service, or where required by law.
4. International transfers
Some of our providers are based in, or process data in, the United States (for example Vercel and Stripe). Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and/or an adequacy decision, so your data keeps an equivalent level of protection.
5. How long we keep data
We keep your personal data for as long as your account is active and as needed to provide the Service. After you delete your account, we delete or anonymise your data within a reasonable period, except where we must keep certain records to comply with legal obligations (for example billing records for tax purposes) or to establish, exercise or defend legal claims.
6. Your rights
Under the GDPR you have the right to: access your data; correct inaccurate data; erase your data ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent. You also have the right to lodge a complaint with your local supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
To exercise any right, email us at media.freling@gmail.com. We will respond within the time limits required by law.
7. Information for United States users
If you are a California resident, you may have rights under the CCPA/CPRA, including the right to know what personal information we collect, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. To exercise these rights, contact media.freling@gmail.com.
8. Security
We take reasonable technical and organisational measures to protect your data, including encryption in transit, hashed passwords, and access controls that restrict each user to their own data. No system is completely secure, so we cannot guarantee absolute security.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, where changes are material, take reasonable steps to notify you.
10. Contact
For any privacy question or request: media.freling@gmail.com, Tradesef, KvK-42139478, the Netherlands.
Tradesef, KvK-42139478, the Netherlands. All rights reserved.