Tradix Privacy Policy

This Privacy Policy explains how Tradix Technologies Inc ("Tradix", "we", "us") collects, uses and shares personal information when you use the Tradix app at app.tradix.cc, the website at tradix.cc, the Tradix Discord bot and related services (the "Service"). For the purposes of data protection law, we are the controller of your personal information.

We do not sell your personal information, we do not show ads, and we do not share your journal or trading data with advertisers.

1. Information we collect

Information you give us

• Account details: email address, password (stored only as a secure hash by our authentication provider), display name, and the profile details you choose to add.
• Date of birth: to confirm you are 18 or older. We record when you confirmed your age and accepted our Terms and this Policy.
• Your trading and journal content: trades, backtest sessions and their trades, journal and notebook entries, notes, tags, screenshots and images you upload or that the app captures for you, chart drawings and layouts, strategies, custom scripts and indicators, goals and settings.
• Support messages: what you send us in support conversations and any files you attach.
• Payment details: handled by Stripe. We never receive or store your full card number. We receive limited information from Stripe such as your card brand, last four digits, expiry date, billing country, and your subscription and payment status.

Information from services you connect

• Google or Discord sign-in: if you sign in with Google or Discord, we receive your email address, name and profile picture from that service, as allowed by your settings there.
• Discord integration: if you link Discord, we store your Discord user ID and username, the ID of the server you verified in, and the channel or thread IDs you choose for posts.

Information collected automatically

• Usage and device information: the pages and features you use, when you sign in, and technical information such as browser type, device type and approximate time zone, used to run and secure the Service.
• IP addresses: our hosting and security providers process IP addresses to deliver the Service and protect it from abuse. We store IP addresses ourselves only for staff accounts' security checks and in security logs.
• Cookies and local storage: we use cookies and your browser's local storage to keep you signed in, remember your preferences (such as layouts, filters and settings) and keep the Service secure. We do not use advertising or cross-site tracking cookies.

2. How we use your information

We use your information to:

• provide the Service: store your journal and backtests, run replays, calculate analytics, and show your data back to you;
• create and secure your account, including sign-in, two-factor authentication and age confirmation;
• process subscriptions, payments, sales, discount codes and refunds, and prevent payment fraud;
• post to Discord when, and only as, you have turned it on;
• provide support and respond to your requests;
• send service messages, such as receipts, security alerts and changes to our Terms;
• send product news and offers by email, unless you opt out (Settings > Email, or the unsubscribe link in any such email);
• monitor, debug, measure and improve the performance and reliability of the Service, including through aggregate statistics that do not identify you (for example, the total number of traders or backtest sessions shown on tradix.cc);
• detect and prevent abuse, security incidents and violations of our Terms;
• comply with legal obligations and enforce our rights.

Consent (Canada): by creating an account you consent to the collection, use and disclosure of your personal information for the purposes in this Policy, as Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial privacy laws allow. You can withdraw consent at any time, subject to legal or contractual limits; some of the Service may then stop working for you.

Legal bases (EEA, UK and similar laws): we rely on performance of our contract with you (running the Service and your subscription), our legitimate interests (security, fraud prevention, improving the Service and limited direct marketing to existing users, balanced against your rights), your consent where we ask for it (you can withdraw it at any time), and legal obligations (such as tax and accounting records).

3. Who can see your data

Your journal, trades and backtests are private to your account. Access is enforced by our database's row-level security rules. Other users cannot see them unless you choose to share something, for example by posting to Discord.

A small number of authorised Tradix staff can access account and subscription information to provide support, handle billing and keep the Service secure. Staff access requires two-factor authentication and an approved device, and administrative actions are logged.

4. How we share information

We share personal information only as follows:

• Service providers who process it on our behalf under contract, to run the Service:
  • Supabase: database, authentication, file storage and server functions
  • Vercel: hosting of the Tradix app
  • Cloudflare: hosting of tradix.cc, network delivery and security
  • Stripe: payments, subscriptions and invoices
  • Resend: sending email
  • Google and Discord: sign-in, if you choose them; Discord also receives the posts you ask us to send
• When you direct us: for example, posts to a Discord server, which are then visible to that server's members under Discord's terms.
• Legal and safety: if we believe in good faith that disclosure is required by law, legal process or a government request, or is needed to protect the rights, property or safety of Tradix, our users or others.
• Business transfers: as part of a merger, acquisition, financing or sale of assets, in which case your information stays subject to this Policy or you will be told otherwise.
• With your consent, for any other purpose.

5. International transfers

We are based in Canada. We and our providers may store and process your information in the United States, Canada and other countries whose data protection laws may differ from those where you live, and it may be accessible to the courts, law enforcement and national security authorities of those countries. Where the law requires, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or our providers' participation in recognised data transfer frameworks.

6. How long we keep information

• Account and journal data: for as long as your account is open. You can delete your trades and log entries at any time in Settings.
• After you ask us to delete your account: we delete or anonymise your personal information within 30 days, except where we must keep it longer.
• Billing records: kept as long as required by tax and accounting law (typically up to 7 years).
• Support conversations and security logs: kept as long as needed for their purpose, typically no longer than 2 years, unless needed for an ongoing issue.
• Backups: deleted data may remain in encrypted backups for a limited period until they are overwritten.

7. Your choices and rights

Everyone can:

• see and change most of their information in the app;
• export their journal data from the app;
• delete their trades and log entries in Settings;
• opt out of marketing email in Settings > Email;
• disconnect Discord at any time on the Discord page;
• ask us to delete their account through in-app support or at ceo@tradix.cc.

Depending on where you live (for example, in the EEA, the UK, Switzerland, California and other US states with privacy laws), you may also have the right to access, correct, delete or receive a portable copy of your personal information; to object to or restrict certain processing; to withdraw consent; and to not be discriminated against for using these rights. We do not sell or "share" personal information for cross-context behavioural advertising as those terms are defined under California law, and we do not use personal information for profiling that has legal or similarly significant effects.

To make a request, contact us through in-app support or at ceo@tradix.cc. We will verify your request through your account and respond within the time the law requires (usually 30 to 45 days). You may use an authorised agent where the law allows. You also have the right to complain to your local data protection authority; in Canada, that is the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial privacy commissioner. Our privacy contact, who is accountable for how we handle personal information, can be reached at ceo@tradix.cc.

8. Security

We protect your information with measures including encryption in transit (HTTPS), encryption at rest by our database and storage providers, database row-level security that keeps each account's data private, optional two-factor authentication, and restricted, logged staff access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the authorities as the law requires.

9. Children

The Service is only for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

10. Changes to this policy

We may update this Policy. If a change is material, we will tell you in the app and ask you to review the new version before you continue. The date at the top shows when it last changed.

11. Contact

Tradix Technologies Inc Toronto, Ontario, Canada Email: ceo@tradix.cc Support: the chat bubble in the Tradix app