Privacy Policy

Traxe ("we", "us") operates the trading journal at traxe.net. We are committed to protecting your personal data and your privacy.

Account data: Email address and hashed password, stored securely via Supabase Auth.

Trade data: Everything you log — instruments, P&L, notes, chart images, psych tags. This is stored in a private row in our database, accessible only to your account.

Local device data: Session state, interface preferences, cached market events and pending trade changes may be stored in your browser so the app can recover from reloads or an interrupted connection.

We do not collect: Payment card details (handled by Stripe), brokerage credentials, or financial account access.

We use your data to: (a) provide and improve the Service; (b) send essential account emails (signup confirmation, password reset); (c) respond to support requests.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Account and trade data is stored in PostgreSQL through Supabase. Journal access is scoped to the signed-in user and protected by database row-level security.

Chart images and voice memos may be stored inline with your journal or in Supabase Storage. New private-storage references use owner-scoped paths and short-lived signed links. During beta, do not upload screenshots containing account numbers or other information you do not need in the review.

• Supabase — database and auth (EU hosting)
• Stripe — payment processing if paid plans are enabled (does not receive trade data)
• Vercel — hosting and edge functions
• Finnhub — economic calendar data (no personal data sent)

If you are in the EU/EEA, you have the right to: access your data, correct inaccurate data, request deletion, export your data, and object to processing.

You can download a full-account JSON backup and a portable trade export from Settings → Data. To delete your account and all associated data, go to Settings → Danger → Delete Account, or email kamyabmahdioun77@gmail.com.

Traxe does not currently use advertising or analytics trackers. Supabase Auth uses browser storage to keep you signed in, and Traxe uses local browser storage for interface preferences, short-lived caches and pending sync recovery.

We retain your data while your account is active. When in-app account deletion confirms successfully, the active sign-in, database rows and private uploaded media for that account are removed.

We may update this policy. Material changes will be communicated via email or in-app notice before they take effect.

Data questions or GDPR requests: kamyabmahdioun77@gmail.com