Privacy Policy

The short version

We collect the minimum needed to run your account: your email address, a salted cryptographic hash of your password (never the password itself), and the positions, trading plans, and price alerts you choose to save. We never see your brokerage accounts, we never sell your data, and we never share your personal holdings with anyone. You can delete your account — and everything in it — at any time.

What we collect

• Account information: your email address, and your password stored only as a salted PBKDF2 hash. We cannot see or recover your password.
• Your content: the positions, trading plans, and price alerts you save. This is data you enter yourself.
• Technical data: a session cookie that keeps you signed in, single-use password-reset tokens, and basic server logs (such as IP address and timestamps) used to keep the service secure and prevent abuse.
• Payment data: Pro subscriptions are processed by Stripe on Stripe-hosted pages. We never see or store your card number — we only keep a record that your account has an active subscription.

What we never collect

We do not ask for, and have no way to see, your brokerage logins, bank accounts, or trading account balances. We run no advertising cookies and do not track you across other websites.

How we use your data

Only to operate the service: authenticate you, store what you save, send price-alert and password-reset emails you request, and protect the service from abuse. Nothing else.

AI trade analysis (Pro): when you request an analysis, we send the position's facts — symbol, quantity, buy price, and scenario checkpoints — to our language-model provider (OpenAI by default, or Anthropic if configured) so it can write the explanation. Your email address, password, and other account details are never included; the numbers themselves are computed by our own code, never by the AI.

Who can see your data

• Only you can see your positions, plans, and alerts when signed in to your account.
• Our hosting provider stores the database as part of running the service, and our email provider sends the emails you request. They process data only to provide those services.
• Shared plan links are public to anyone who has the link. A shared plan shows the plan's scenarios but never your identity or your other data. Only share a link deliberately, and you can revoke it at any time from the Plans page.
• We do not sell, rent, or share your personal data or your holdings with third parties for marketing or any other purpose.

How we protect it

Passwords are hashed with PBKDF2-HMAC-SHA256 (210,000 iterations, unique random salt per user). Traffic is encrypted in transit (HTTPS), session cookies are HttpOnly, Secure, and SameSite, and authentication endpoints are rate-limited. That said, no system is perfectly secure, and you should use a unique password and keep your sign-in private.

Where your data lives

Your data is stored on our servers in the United States. Please note: on our current hosting plan, redeploying the service can reset the database, which would erase saved data. Keep your own records of anything important.

Your rights

You can view and change your saved data at any time in the app. You can permanently delete your account — including your positions, plans, alerts, and profile — from the dashboard's account section; deletion is immediate and irreversible. To request a copy of your data or ask questions, contact us at hello@tradingwise.dev.

Data retention

We keep your data only while your account exists. Sessions expire automatically; password-reset tokens expire after one hour. When you delete your account, your data is deleted with it.

Children

TradingWise is for adults (18+) and is not directed at children. We do not knowingly collect data from anyone under 18.

Changes to this policy

If we change this policy, we will update the effective date above. Material changes will be announced on the site.

Contact

Questions about privacy: hello@tradingwise.dev.

This page explains our practices in plain language. It is not legal advice.