Privacy Policy

This privacy policy explains how tradr (“tradr”, “we”, “us”) collects, uses, stores, and shares your information when you use tradr-pro.com or any related services. We comply with the New Zealand Privacy Act 2020 and follow the General Data Protection Regulation (GDPR) baseline for users in the EU/UK.

1. What we collect

We only collect what we need to run tradr:

• Account information — your email address (via Google OAuth or magic link), display name, and profile photo if Google supplies one.
• Subscription data — your Stripe customer ID, plan, payment status, and billing country. We do not store credit card numbers; Stripe handles those directly.
• Usage data — symbols you analyse, watchlist tickers, alert preferences, follow-up chat history with the analysis assistant, and the analyses we generate for you.
• Technical data — IP address, browser type, device type, and timestamps for security and abuse prevention. Stored briefly in server logs (max 30 days).
• Push subscriptions — if you enable browser notifications, the endpoint URL and public keys your browser provides. We never see notification content beyond what we send.

We do not collect your portfolio, brokerage credentials, position sizes, financial situation, or trading goals. tradr is a generic instrument-analysis tool — never tied to your personal finances.

2. How we use it

• To generate technical analyses and deliver them to you.
• To run your watchlist and send alerts when setups trigger.
• To process your subscription and bill you correctly.
• To prevent fraud, abuse, and unauthorised access.
• To improve tradr — usage patterns inform product decisions, but we do not sell your data, ever.

3. Who we share it with

We share data only with these processors, each contracted to handle data securely:

• Supabase (database + auth) — hosts your account, watchlist, and analyses. EU-region datacenters.
• Stripe (payments) — processes subscriptions and stores payment methods.
• Anthropic (AI provider) — receives the chart data and indicators for analysis. Anthropic does not retain prompts for training.
• Resend (email delivery) — sends magic links, alerts, and account emails.
• Vercel (hosting) — serves the website and runs scheduled crons.
• Cloudflare / EODHD / Massive Markets / Yahoo Finance (market data) — we send the ticker you query, never your account info.

We do not sell, rent, or otherwise commercialise your personal data. We only disclose data to authorities if compelled by valid legal process under New Zealand law.

4. Where it lives

Your account data is stored in Supabase’s EU-region infrastructure. Backups are retained for 7 days. Stripe data is stored according to Stripe’s own data-residency rules. Anthropic processes prompts in the United States. By using tradr you consent to your data being transferred to these jurisdictions for processing under appropriate safeguards (Standard Contractual Clauses for EU users).

5. How long we keep it

• Active accounts — for as long as your account is open.
• Cancelled accounts — deleted within 30 days of your request, except where we’re legally required to retain financial records (Stripe billing data is kept 7 years for NZ tax compliance).
• Server logs — 30 days, then purged.
• Analyses you’ve generated — kept while your account is active; deleted with the account.

6. Your rights

You have the following rights and can exercise them by emailing hello@tradr-pro.com:

• Access — request a copy of the personal data we hold about you.
• Correction — fix any data that’s wrong.
• Deletion — close your account and have your data removed (subject to financial-record retention noted above).
• Portability — export your watchlist and analyses as JSON.
• Object / restrict — opt out of analytics or any non-essential processing.

If you’re in the EU/UK, you also have the right to lodge a complaint with your local data protection authority. NZ users can complain to the Office of the Privacy Commissioner at privacy.org.nz.

7. Cookies and tracking

tradr uses essential cookies for login sessions and Stripe checkout. We do not use third-party advertising trackers. We do use first-party analytics to count page views and feature usage — aggregated, not tied to individual users.

8. Children

tradr is not intended for anyone under 18. We don’t knowingly collect data from minors. If you believe a minor has signed up, email us and we’ll delete the account immediately.

9. Changes to this policy

We may update this policy occasionally. Material changes will be announced at the top of this page with at least 14 days’ notice before they take effect. Continued use of tradr after the effective date means you accept the updated policy.

10. Contact

Questions about this policy or how we handle your data: email hello@tradr-pro.com. tradr, New Zealand.