Privacy policy

1. Personal information we collect

We collect personal information relating to you ("Personal Information") as follows:

Personal Information you provide. When you create an account, subscribe, contact us, or use features that store your input, we may collect information such as your name, email address, billing details, trading workspace content (including trade logs, journals, notes, strategies, and feedback), and any other information you choose to provide.

Personal Information we receive from your use of the Services. When you visit, use, or interact with the Services, we may receive technical information such as device and browser type, IP address, pages viewed, feature usage, timestamps, and diagnostic logs needed to operate and secure the Services.

Authentication information. Sign-in is handled through our identity provider (Microsoft Azure AD B2C). We receive account identifiers and profile fields needed to authenticate you and manage your subscription.

2. How we use personal information

We use Personal Information to:

• Provide, maintain, and improve the Services
• Authenticate users and manage subscriptions
• Store and process your workspace data in isolated storage tied to your account
• Respond to support requests and product feedback
• Operate optional AI-assisted features described in our AI policy
• Monitor, detect, and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our terms

3. Disclosure of personal information

We do not sell your Personal Information. We may disclose Personal Information in these circumstances:

• Service providers that help us operate the Services (for example cloud hosting, authentication, payment processing, and LLM providers when you use AI features)
• Legal and safety when required by law, regulation, legal process, or to protect the rights, property, or safety of TraderReflex, our users, or others
• Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy

Payment processing is handled by our payment provider. LLM processing is handled by the provider configured for the feature you use. Each provider receives only the information needed to perform its role.

4. Your rights and data controls

Depending on where you live, you may have rights to access, correct, delete, export, or restrict certain processing of your Personal Information.

Within TraderReflex you can:

• Download a full copy of your workspace data from User Profile
• Permanently delete your workspace data from User Profile
• Manage subscription and billing details through your account

To exercise other privacy rights, contact us using the details in section 11. We may need to verify your identity before responding.

5. Data isolation and retention

TraderReflex stores customer workspace data in isolated storage rather than a shared central database of trading content. We retain Personal Information for as long as your account is active or as needed to provide the Services, comply with law, resolve disputes, and enforce agreements. When you delete workspace data, we remove the associated tenant content from our systems subject to backup and legal retention limits.

6. Security

We use administrative, technical, and organizational measures designed to protect Personal Information, including access controls, encryption in transit, isolated tenant storage, and ongoing review of our security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children

The Services are not directed to children under 16, and we do not knowingly collect Personal Information from children under 16. If you believe a child has provided us Personal Information, contact us and we will take appropriate steps to delete it.

8. Links to other websites

The Services may link to third-party sites or services. Their privacy practices are governed by their own policies, not this Privacy Policy.

9. International users

If you access the Services from outside the country where our infrastructure is hosted, your information may be processed in other countries where we or our service providers operate. Those countries may have different data protection laws than your jurisdiction.

10. Changes to this privacy policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Material changes may also be communicated through the Services or by email where appropriate.

11. How to contact us

If you have questions about this Privacy Policy or our privacy practices, contact us through the message inbox in the TraderReflex app (User Profile) or email privacy@traderreflex.com.