Privacy Policy

1. What We Collect

• Registration abuse prevention: a keyed hash of your registration IP address, the registration date and the number of accounts registered. We allow up to three accounts per IP address; people sharing a network may share an IP address.
• Account data: email address, name, OAuth provider info.
• Trading data: trades, journal entries, notes, playbooks and images you upload.
• Usage data: pages visited, features used (via PostHog and Google Analytics, anonymised where possible).
• Payment data: processed entirely by Stripe. We store only a Stripe Customer ID.

2. How We Use Your Data

• To provide and improve the Service.
• To prevent repeated account creation and trial abuse from the same IP address.
• To send transactional emails (trial expiry, payment receipts, invite emails).
• To generate anonymised aggregate statistics (community benchmarks) — never tied to your identity.

3. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe — payment processing.
• Resend — transactional email delivery.
• PostHog / Google Analytics — product and website analytics.
• Sentry — error monitoring (anonymised stack traces).
• Hosting and database providers — operate the application, database and backups. New notebook images are stored encrypted in the database.
• Cloudinary — image storage for other features and older uploads. Older notebook images may still use public links until migrated.
• Google / Cloudflare (AI features) — AI features can send the text you submit and account context, including recent note previews, to Google Gemini directly or through Cloudflare AI Gateway. Saving a regular notebook note does not itself call an AI provider.
• Team workspace members — if you join a team, your trades and journal key metrics are visible to other members per the visibility settings.

4. Team Visibility

Notebook notes are private by default. If you explicitly pin your own note in a team's feed, its text is visible to that team's members. Private notebook image access remains restricted to the owner.

Inside a Team workspace, members can see each other's trades, win rate, P&L, and journal activity. Dollar amounts can be hidden if "Hide $ amounts" is enabled. New members can have a privacy grace period (0–30 days) during which their data is hidden from others.

5. Data Retention

Notebook annotations and collections are retained with your notes. Templates are retained until deleted. Up to 30 earlier text versions are retained per note: removing a fragment from the current text does not erase it from retained history. Deleting a note removes its text history and annotations. Delete-all also removes collections and templates. Notebook export includes these data; downloaded ZIP and annotated SVG files are unencrypted copies.

Notebook notes are retained until you delete them. In Notebook → Your notebook data, you can download a ZIP copy or delete all notebook data on any plan. Deleting a note removes its private images from active storage in the same operation. Unsaved image uploads expire after 24 hours; expired uploads cannot be opened and are removed during maintenance. Older public image links require separate migration and removal of the originals. You can delete your whole account in Settings → Account → Delete account; for other data requests, contact [email protected].

The registration IP hash is retained while this registration restriction is in use, including after account deletion, to prevent repeated registrations. This record contains no email, user ID or original IP address.

Deletion from active storage does not immediately erase backup copies. Scheduled database backups are retained for 6 days (daily), 27 days (weekly), and 89 days (monthly). Manual snapshots can remain until separately removed. A separate private journal retains owner and deleted-object identifiers for 120 days to reapply deletions before a restored service is opened; it contains no note text or images. A downloaded export is an unencrypted copy under your control.

6. Security

Note creation identifiers, owner IDs and expiry dates are retained in the database for up to 120 days to prevent delayed requests from recreating deleted notes. These records contain no text or images; deleting your account removes them from the database.

Notebook access is checked against the signed-in account. New notebook images use authenticated encryption with a separate server key and cannot be opened using a public link. The service needs access to the key to display images; this is not end-to-end encryption. Passwords are hashed with bcrypt. Infrastructure encryption, backup access and retention are controlled through the hosting configuration.

7. Cookies

We use session cookies for authentication (NextAuth.js). No third-party advertising cookies.

8. Your Rights (GDPR / CCPA)

• Access, correct, or delete your personal data.
• Download notebook notes and private images as a ZIP in Notebook, on any plan. For other personal data copies, contact us.
• Opt out of analytics by contacting us.

9. Contact

Privacy questions: [email protected].