Your privacy matters to us. TradeFlow is committed to protecting your personal data and being transparent about how we collect, use, and safeguard your information. This Privacy Policy explains everything you need to know.
1. Information We Collect
1.1 Personal Information
When you use TradeFlow, we may collect the following types of personal information:
- Account Information: Email address, name, password (encrypted)
- Profile Data: Trading preferences, language settings, notification preferences
- Contact Information: Email address for communications and support
- Authentication Data: Login credentials, OAuth tokens (Google Sign-In)
1.2 Usage Data
We automatically collect information about how you interact with our platform:
- Device Information: IP address, browser type, operating system, device identifiers
- Activity Logs: Pages viewed, signals accessed, time spent on platform, clicks and interactions
- Performance Data: Load times, errors, feature usage patterns
- Analytics Data: Google Analytics data (anonymized where possible)
1.3 Trading Activity Data
- Signal Views: Which trading signals you viewed and when
- Article Engagement: News articles you read and engagement metrics
- Broker Interactions: Clicks on broker links (for affiliate tracking)
- Conversion Events: Registration with affiliated brokers (Exness)
1.4 Cookies and Tracking
We use cookies and similar technologies to:
- Keep you logged in
- Remember your preferences (language, theme)
- Analyze site usage and performance
- Track affiliate conversions
- Show you relevant content
2. How We Use Your Information
2.1 Primary Purposes
- Service Delivery: Provide trading signals, market analysis, and educational content
- Account Management: Create and maintain your account, authenticate logins
- Personalization: Customize your experience based on preferences and usage patterns
- Communication: Send important updates, notifications, and respond to inquiries
2.2 Analytics and Improvement
- Analyze usage patterns to improve our platform
- Identify and fix technical issues
- Test new features and measure their effectiveness
- Generate anonymized statistics about platform usage
2.3 Marketing and Affiliate Programs
- Affiliate Tracking: Track broker referrals for commission purposes (Exness Partners)
- Conversion Attribution: Understand which marketing channels drive user registrations
- Email Marketing: Send promotional content (only with your consent)
⚠️ Important: We do NOT collect or store your trading account credentials, broker passwords, or financial account information. Any trading you do is directly with the broker (e.g., Exness), not through TradeFlow.
3. How We Share Your Information
3.1 Third-Party Services
We share data with trusted third-party services that help us operate:
- Google Analytics: Website traffic analysis (anonymized IP addresses)
- OpenAI: AI-powered signal generation (no personal data shared)
- Supabase: Database hosting and authentication (encrypted)
- Render.com: Application hosting and infrastructure
- Vercel: Content delivery and edge computing
3.2 Affiliate Partners
- Exness Partners: We share conversion events when you register with Exness through our affiliate links. This includes basic information like registration timestamp and affiliate ID (not personal identity)
- Purpose: Track commissions for successful referrals
- Data Shared: Click IDs, timestamps, conversion events (NO personal information)
3.3 Legal Requirements
We may disclose your information if required to:
- Comply with legal obligations, court orders, or government requests
- Enforce our Terms of Service
- Protect our rights, property, or safety
- Prevent fraud or illegal activities
✅ We Never Sell Your Data: TradeFlow does not sell, rent, or trade your personal information to third parties for their marketing purposes. Period.
4. Data Security
4.1 Security Measures
We implement industry-standard security measures to protect your data:
- Encryption: All data transmitted via HTTPS/TLS encryption
- Password Protection: Passwords are hashed using bcrypt (never stored in plain text)
- Database Security: Supabase Row-Level Security (RLS) policies
- Access Controls: Limited employee access to personal data
- Regular Audits: Security reviews and vulnerability scanning
- Infrastructure: Hosted on secure cloud platforms (Render, Vercel)
4.2 Data Retention
- Account Data: Retained while your account is active
- Activity Logs: Kept for 90 days for analytics purposes
- Analytics Data: Anonymized and retained for up to 24 months
- Deleted Accounts: Personal data deleted within 30 days of account deletion request
5. Your Rights
5.1 GDPR Rights (European Users)
If you're in the European Union, you have these rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restriction: Limit how we process your data
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing of your data for marketing purposes
- Right to Withdraw Consent: Withdraw consent at any time
5.2 CCPA Rights (California Users)
California residents have additional rights:
- Right to Know: What personal information we collect and how it's used
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt-out of the sale of personal information (we don't sell data)
- Right to Non-Discrimination: Equal service regardless of privacy choices
5.3 How to Exercise Your Rights
To exercise any of these rights, contact us at:
- Email: privacy@tradeflow.blog
- Account Settings: Delete your account directly from your profile
- Response Time: We'll respond within 30 days
6. Children's Privacy
TradeFlow is not intended for users under 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.
7. International Data Transfers
TradeFlow operates globally and may transfer your data to:
- United States: Our servers are hosted by Render.com (US-based)
- European Union: Some services use EU-based data centers
- Safeguards: We use Standard Contractual Clauses (SCCs) for international transfers
8. Third-Party Links
Our platform contains links to third-party websites (e.g., Exness broker). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before sharing any personal information.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes:
- We'll update the "Last Updated" date at the top
- We'll notify you via email (for material changes)
- We'll show a prominent notice on our platform
Your continued use of TradeFlow after changes constitutes acceptance of the updated policy.
10. Cookie Policy Summary
For detailed information about cookies, see our Cookie Policy. In brief:
- Essential Cookies: Required for login and basic functionality
- Analytics Cookies: Google Analytics for usage tracking
- Affiliate Cookies: Track referrals to Exness
- Preference Cookies: Remember your language and settings
11. California "Do Not Track" Disclosure
TradeFlow does not currently respond to "Do Not Track" signals from browsers. However, you can control cookies through your browser settings and opt-out of Google Analytics using their opt-out browser extension.
12. Data Processing Legal Basis (GDPR)
We process your personal data based on:
- Contract: Necessary to provide our services (signals, content)
- Legitimate Interest: Improve our platform, prevent fraud
- Consent: Marketing emails, optional features
- Legal Obligation: Comply with laws and regulations