Privacy Policy

Last updated: May 29, 2026

1. Data Controller

Tradesteady ("we", "us") is the data controller for personal data you provide when using our trading journal. Contact: eivind.brekne@gmail.com.

2. What we collect

  • Account information (email, password — stored encrypted by Supabase Auth)
  • Trading data you log (instrument, P&L, notes, tags, screenshots)
  • Journal, gameplan, trading plan, and AI analyses linked to your account
  • Conversations with the Zensei agent (Discord DMs), used to improve the service
  • Technical logs (API usage, rate limits) for operations and cost control

3. Purpose and legal basis

We process data to deliver the service (GDPR Art. 6(1)(b) — contract), secure the platform (legitimate interest), and fulfill legal obligations. AI analysis is sent to Anthropic to generate coaching feedback on your trades.

4. Subprocessors (data processors)

  • Supabase — database, authentication, file storage (EU, Frankfurt)
  • Anthropic — AI analysis of trades and journal (API, no training on your data)
  • Vercel — hosting of the web application (EU region recommended)
  • Finnhub / Marketaux — market news and economic calendar (aggregated data, not your personal data)

Data is stored primarily in the EU/EEA. Transfers outside the EEA only occur where a valid transfer mechanism exists (e.g., Standard Contractual Clauses).

5. Retention period

Data is stored for as long as your account is active. When you delete your account, personal data is permanently deleted, except for what the law requires us to retain.

6. Your rights

  • Access — view data in the app
  • Export — download JSON under Profile → "Download my data" (GDPR Art. 20)
  • Deletion — delete account under Profile → "Delete account" (GDPR Art. 17)
  • Correction — edit data directly in the app
  • Complaint — to the Norwegian Data Protection Authority (datatilsynet.no) if you believe we are violating the regulations

7. Security

We use row-level security (RLS) in the database, encrypted HTTPS, authentication via Supabase, and rate limiting on AI endpoints. No system is 100% secure, but we work continuously to reduce risk.

← Back