1. Introduction and Scope
This Privacy Policy explains how TradeChrona ("TradeChrona," "we," "us," or "our") collects, uses, discloses, stores, and protects information when you visit tradechrona.com, create an account, use the TradeChrona applications, install a connector, communicate with support, or otherwise interact with our services.
This policy applies to the TradeChrona website, trading journal, calendar, analytics, backtesting tools, Strategy Builder, AI Mentor, connected-platform features, administrative services, emails, and related software. It does not govern the independent practices of NinjaTrader, Tradovate, Topstep, ProjectX, payment processors, or other third parties.
2. Information We Collect
2.1 Information you provide
We may collect your name, display name, username, email address, password-derived authentication information, timezone, currency and display preferences, notification choices, legal-policy acceptances, account settings, and any profile information you choose to provide.
2.2 Trading and account information
Depending on the features you use, we may process platform name, environment, connected account identifiers, account nickname, account type, prop firm, account size, balances, high-water marks, profit targets, drawdown thresholds, daily loss limits, payout rules, trading-day progress, instrument identifiers, executions, fills, orders retrieved for reconstruction, positions, fees, commissions, realized and unrealized profit or loss, timestamps, contract quantities, prices, connection state, and import metadata.
2.3 Journal and research content
We may process journal entries, notes, discipline answers, ratings, goals, playbooks, setup labels, tags, rule violations, emotional-state entries, screenshots, captions, attachments, backtest settings, historical datasets or references, simulated signals and backtest results, optimizer settings, Strategy Builder definitions, strategy versions, generated NinjaScript exports, and related user-created content.
2.4 Automatically collected information
We may collect IP address, browser and device type, operating system, language, approximate location derived from IP, device timezone, referring pages, pages viewed, actions taken, session identifiers, cookie information, connector version, application version, heartbeat and synchronization timestamps, error reports, security events, performance telemetry, email-delivery events, and diagnostic logs.
2.5 Communications and support
We collect messages, attachments, call or ticket details, feedback, survey responses, and records of communications with support, billing, privacy, security, or administrative personnel.
3. Sources of Information
We obtain information directly from you; from Google or Apple when you choose social sign-in; from Stripe and related payment providers; from authorized NinjaTrader connectors; from Tradovate, TopstepX, ProjectX, or other integrations you authorize; from service providers that help operate and secure the service; and from your browser, device, or application interactions.
We do not require your broker password for the NinjaTrader connector. Where API credentials or tokens are necessary, the production design stores encrypted secret references outside browser storage and excludes them from exports and logs.
4. How We Use Information
We use information to create and secure accounts; authenticate users; provide connected imports; reconstruct logical trades; calculate calendar, dashboard, account-health, analytics, and drawdown information; save journal content; run backtests and optimizers; generate Strategy Builder exports; provide AI Mentor; process subscriptions; send transactional communications; respond to support; detect fraud and abuse; investigate incidents; enforce terms; maintain backups; improve reliability and user experience; comply with law; and establish, exercise, or defend legal claims.
We may use aggregated or de-identified information to understand feature usage, improve calculations, measure reliability, and plan product development. We will not attempt to re-identify information that has been properly de-identified except to test our de-identification controls where permitted by law.
5. Platform Connections and Trading Data
Connected-platform information is used to provide the features you request. TradeChrona may receive data that is delayed, incomplete, duplicated, corrected, or unavailable because of provider systems, connectivity, account permissions, contract metadata, or API limitations. We may retain raw provider event identifiers and normalized records to prevent duplicates, reconstruct logical trades, preserve user annotations during reprocessing, and investigate discrepancies.
TradeChrona connections are designed to be read-only. The website does not place, route, copy, cancel, or modify orders. Working orders or positions may be displayed solely for monitoring and reconstruction where supported.
6. Authentication and Account Security
For email/password accounts, passwords should be handled by our authentication provider and stored as one-way password verifiers, not readable plaintext. When you use Google or Apple sign-in, we may receive a provider user identifier, name, email address, profile image, and token or session information required to complete authentication.
We process session cookies, multifactor-authentication factors, recovery information, device/session history, login timestamps, IP information, and security-event data to secure your account. You are responsible for protecting your devices, credentials, recovery codes, connected-platform credentials, and email account.
7. Billing and Payment Information
Stripe or another payment processor collects and processes payment-card or bank information. TradeChrona generally receives customer and subscription identifiers, billing name and address, payment status, plan, selected add-ons, invoice details, tax information, last four digits or payment-method summary where supplied, failed-payment status, refunds, disputes, and transaction history. We do not intend to store full payment-card numbers or security codes on TradeChrona systems.
8. Uploads, Screenshots, and User Content
Files you upload may include trading charts, platform screenshots, journal images, or other material. Upload only content you are authorized to use and avoid including unnecessary personal, financial, health, or third-party information. We may inspect metadata and file characteristics, validate type and size, scan for malicious content, generate previews, and store copies needed for backups or exports.
You retain your rights in user content, subject to the limited license necessary for TradeChrona and its service providers to host, process, display, transmit, back up, and provide that content to you.
11. Service Providers and Subprocessors
Production providers may include Supabase for database, authentication, and storage; Stripe for billing; Resend or Postmark for transactional email; Vercel or another web host; a persistent connector-gateway host; Cloudflare for DNS and security; Sentry or another monitoring provider; and approved platform APIs. The actual subprocessor list must be finalized and published before launch and updated when material providers change.
12. Data Retention and Backups
We retain information for as long as reasonably necessary to provide the service, maintain account and transaction records, satisfy legal and tax obligations, resolve disputes, enforce agreements, prevent abuse, and preserve reliable imports. Retention periods vary by data type, account state, legal obligation, backup cycle, and security need.
Deletion from active systems may not immediately remove information from encrypted backups, immutable security logs, fraud-prevention records, or records we must keep by law. Backup copies are isolated from ordinary use and removed or overwritten according to the backup lifecycle.
13. Data Security
We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transport, access controls, workspace isolation, row-level database policies, secret management, signed links, audit logging, rate limits, monitoring, and backup procedures. No internet service or storage system can be guaranteed completely secure, available, or error-free.
Report suspected security issues to security@tradechrona.com. Do not include passwords, API secrets, payment-card numbers, or unnecessary trading data in the initial report.
14. Your Rights and Choices
Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about disclosures. You may also have the right to appeal a denied request and contact a regulator. We may need to verify your identity and authority before acting.
You can manage many preferences, sessions, connections, notifications, exports, and deletion requests from Settings. Marketing communications, if offered, will provide an unsubscribe method; transactional and security messages may continue while your account remains active.
15. Account Export, Disconnection, and Deletion
You may export supported account, trade, journal, strategy, and backtest data. Exports do not include passwords, API keys, refresh tokens, connector credentials, encryption keys, or other secrets. Disconnecting a platform stops new synchronization but does not automatically delete previously imported history unless you separately request deletion.
Account deletion removes or de-identifies eligible active data subject to legal, security, backup, dispute, and transaction-retention requirements. Deletion may be irreversible. Where another workspace member owns shared content, workspace rights and retention rules may apply.
16. International and Interstate Processing
TradeChrona and its providers may process information in the United States and other jurisdictions. Those locations may have data-protection laws different from your own. Where required, we will use an approved transfer mechanism and provide additional disclosures.
17. Children's Privacy
TradeChrona is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children. Contact us if you believe a child has submitted information so we can investigate and take appropriate action.
18. Changes to This Policy
We may update this policy as the service, providers, law, or practices change. We will post the updated version, change the "Last updated" date, and provide additional notice when required. Material changes do not retroactively authorize materially different use where consent is legally required.
19. Contact Us
Privacy questions and requests may be sent to privacy@tradechrona.com. General support: support@tradechrona.com. Security reports: security@tradechrona.com.
Operator: TradeChrona
Website: tradechrona.com