Privacy Policy

1. Introduction

Welcome to TradeAutopsy ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading journal and analytics platform.

By using TradeAutopsy, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Account Information

• Email address
• Name (if provided)
• Authentication credentials (encrypted)
• Profile information

2.2 Trading Data

• Trade history (symbols, quantities, prices, P&L)
• Journal entries and notes
• Trading strategies and setups
• Tags and categories
• Emotional state tracking
• Screenshots and attachments
• Audio recordings (if you use audio journaling)

2.3 Usage Data

• Pages visited and features used
• Time spent on platform
• Device and browser information
• IP address (for security purposes)
• Error logs and crash reports

2.4 Broker Integration Data

If you connect your broker account (e.g., Zerodha), we may access:

• Trade history (read-only)
• Account balance (if provided by broker API)
• Broker authentication tokens (stored securely)

3. How We Use Information

We use your information to:

• Provide Services: Process and display your trading data, generate analytics, and provide AI-powered insights
• Improve Platform: Analyze usage patterns to enhance features and fix bugs
• Generate Insights: Use AI to analyze your trading patterns and provide personalized recommendations
• Send Notifications: Alert you about important events, goal achievements, and platform updates
• Prevent Fraud: Detect and prevent unauthorized access or fraudulent activity
• Comply with Legal Obligations: Meet legal requirements and respond to legal requests

We do NOT: Sell your personal data to third parties, use your data for advertising purposes, or share your trading data with other users.

4. Data Storage & Security

4.1 Data Storage

Your data is stored securely on Supabase (PostgreSQL database) with:

• Encryption at rest
• Encryption in transit (HTTPS/TLS)
• Regular security audits
• Automated backups

4.2 Security Measures

• Row-level security (RLS) policies to ensure data isolation
• Secure authentication (Supabase Auth + WorkOS)
• API rate limiting to prevent abuse
• Regular security updates
• Access controls and audit logs

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services:

• Supabase: Database, authentication, and storage (privacy policy: supabase.com/privacy)
• WorkOS: Enterprise authentication and SSO (privacy policy: workos.com/privacy)
• OpenAI: AI-powered insights and coaching (privacy policy: openai.com/privacy)
• Vercel: Hosting and deployment (privacy policy: vercel.com/privacy)
• Zerodha API: Broker integration (privacy policy: kite.trade/privacy)

These services have their own privacy policies. We recommend reviewing them to understand how they handle your data.

6. Your Rights

You have the following rights regarding your data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your account and data
• Export: Export your trading data in CSV, JSON, or PDF format
• Opt-out: Unsubscribe from marketing emails (transactional emails may still be sent)
• Objection: Object to certain processing activities

To exercise these rights, contact us at privacy@tradeautopsy.in or use the settings page in your account.

7. Cookies

We use cookies and similar technologies:

7.1 Essential Cookies

Required for authentication and security. Cannot be disabled.

7.2 Analytics Cookies

Help us understand how you use the platform (optional).

7.3 Preference Cookies

Store your preferences (theme, sidebar state, etc.).

You can manage cookie preferences in your browser settings or through our cookie consent banner.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can choose your data retention period in settings:

• 30 Days: Data deleted after 30 days of inactivity
• 1 Year: Data retained for 1 year
• Forever: Data retained indefinitely (default)

When you delete your account, all data is permanently deleted within 30 days, except where we are required to retain it for legal purposes.

9. Children's Privacy

TradeAutopsy is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending an email notification (for significant changes)
• Showing a banner in the app (for major changes)

Your continued use of TradeAutopsy after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: