Privacy Policy

• Account details (email, display name, password) — to create and secure your account. Basis: providing the service (contract).
• Trading records you enter (trades, positions, ideas, watchlist, notes) — to provide the journal, alerts, summaries and AI reviews. Basis: contract.
• Chat messages and uploaded videos/captions — to run live chat and the Posting Kit. Basis: contract.
• Support emails — to answer your questions. Basis: legitimate interests.
• Technical data (IP address, device and browser type, basic usage logs) — for security, fraud prevention and fixing problems. Basis: legitimate interests.
• Subscription status (plan, renewal dates) — to unlock the features you paid for. Basis: contract.

Card details are collected directly by Paddle, not by us.

Our legal bases for the above are: performing the agreement you enter into when you open an account; your consent, where you give it; our legitimate interests in keeping TradeSmart secure, working and improving; and compliance with a legal obligation.

• Service providers who host our app and database, and AI providers that process your trading records when you run an AI feature.
• Paddle, our Merchant of Record, for selling subscriptions, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities, where the law requires it.

We never sell your personal information. Some providers may store data outside Australia; we only use providers with appropriate safeguards.

We keep your data while your account is active. If you close your account, or ask us to, we delete or anonymise your trading records, chat messages and uploaded videos within 30 days, and your account details shortly after that. We keep only what we are required to keep by law, such as records of a purchase or a refund request.

You can ask to access a copy of your personal information, correct it, delete it, or object to how we use it, by emailing tradesmart208@gmail.com. Where we rely on your consent, you can withdraw it at any time by emailing us. If you're unhappy with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). If you live in the UK or EU, you also have GDPR rights including portability, restriction and withdrawing consent, and we'll respond within one month.

We use reasonable technical and organisational measures to protect your data, including encrypted connections, access controls and per-user data permissions.

We only use essential browser storage to keep you signed in and remember things like your posting checklist. We don't use advertising or tracking cookies. You can clear this storage in your browser settings, but you'll be signed out.

We may update this policy and will change the date below when we do.