PRIVACY POLICY

Last updated: March 4, 2026

1. What We Collect

SaveMyTrade ("SMT", "we", "our") collects only the minimum data necessary to provide our service:

• Account info: Display name, email address, and an encrypted password hash when you create an account.
• Rule configuration: Your trading rule settings (loss limits, trade limits, cooldown duration, session times).
• Session data: Anonymized trade counts, P&L totals, and loss streak counts synced to our cloud database for session persistence and anti-loophole protection. We do not see your actual trades, positions, or account balances.
• Subscription and billing status: Subscription status, billing period dates, and Paddle customer and subscription identifiers. We do not store your payment card details - these are handled entirely by Paddle.
• Behavioral interaction data: Rule trigger events (e.g. cooldown activations, daily loss limit hits, overtrading interventions), discipline streaks, and session activity timestamps. This data is used to operate the service and is stored in your account in Supabase.

2. What We Do NOT Collect

• Your TradingView login credentials
• Your broker or exchange account details
• Your actual trading data, order history, or account balance
• Any financial information beyond what you configure in SMT rules
• Browsing history outside of TradingView
• Keystrokes, screenshots, or screen recordings

3. How Data Is Stored

Trading session data (P&L, trade count, loss streak, lockout status) is stored both locally in your browser and synced securely to our cloud database (hosted on Supabase) to prevent loopholes such as logging out and back in to reset limits. This data is tied to your account and is not shared with third parties.

Rule configurations are synced via our cloud service so they stay consistent across sessions. Account data (email, display name) is stored securely and is only used to identify your account and sync your settings.

4. How We Use Your Data

• To provide and maintain the SaveMyTrade service
• To sync your rule configurations across devices
• To send important service-related communications (account security, billing)
• To improve the product based on anonymized, aggregated usage patterns
• To manage subscription access, verify active billing status, and enforce trial and plan limits

5. Data Sharing & Third-Party Services

We do not sell, rent, or share your personal data with third parties for advertising purposes. We use the following third-party services to operate SaveMyTrade:

• Paddle (Privacy Policy) - Our Merchant of Record. Paddle collects and processes your payment information (credit card details, billing address) directly. We never see or store your payment details.
• Supabase (Privacy Policy) - Cloud database hosting. Your account data, rule configurations, and session data are stored on Supabase infrastructure.
• Cloudflare (Privacy Policy) - We use Cloudflare Turnstile for bot protection on login and signup. Cloudflare may process your IP address and browser characteristics.
• Google Fonts (Privacy Policy) - Font delivery. Your browser connects to Google servers to load fonts, which may transmit your IP address.

We may share anonymized, aggregated statistics (e.g., "94% of users have loss limits enabled") but never individual data.

6. Data Retention

Session data is stored locally and resets daily based on your configured trading day schedule. Account data is retained as long as your account is active. You can delete your account and all associated data at any time from the Dashboard under Profile → Danger Zone.

7. Security

Passwords are hashed and never stored in plain text. All data transmission uses HTTPS encryption. Local session data is stored in Chrome's sandboxed extension storage, inaccessible to other extensions or websites.

8. Your Rights

You have the right to access, correct, or delete your personal data. You can export your rule configurations or delete your account entirely from the Dashboard. Contact us at support@savemytrade.com for any data requests.

9. Your Rights Under GDPR (EEA/UK Users)

If you are located in the European Economic Area or United Kingdom, you have the following additional rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to data portability: Request your data in a machine-readable format.
• Right to restrict processing: Request that we limit how we use your data.
• Right to object: Object to processing of your personal data.

Our legal basis for processing your data is: (a) performance of a contract (providing the SaveMyTrade service), (b) your consent (where applicable), and (c) our legitimate interests in improving the service. To exercise any of these rights, email support@savemytrade.com. We will respond within 3-7 business days.

10. Your Rights Under CCPA (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how it is used.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information.

We do not sell your personal information. To exercise your rights, email support@savemytrade.com.

12. What SaveMyTrade Is Not

SaveMyTrade is a discipline enforcement tool, not a financial service. For clarity:

• We do not execute trades on your behalf.
• We do not connect to your broker or exchange account.
• We do not provide financial advice, investment recommendations, or trading signals.
• We do not guarantee the prevention of trading losses.
• The data we collect reflects your self-configured rules and session activity - not your actual brokerage or financial account.

11. Cookies & Tracking

SaveMyTrade does not use tracking cookies or third-party analytics. We use Cloudflare Turnstile for bot protection, which may set a cookie on your device. Supabase uses a session token stored in your browser's local storage to maintain your login session. No advertising or tracking cookies are used.