Privacy Policy

This policy explains what data TradersWatcher collects, why, and your rights over it. We collect the minimum needed to run the Service and never sell your data.

• Account data — email and authentication details.
• Trading data — trades, prices, P&L, execution metrics imported from your broker (via our Expert Advisor or CSV).
• Voice notes — audio you record, and text transcripts generated from it.
• Screenshots & notes — chart images and text you attach to trades.
• Usage analytics — only if you agree. When you accept, we use PostHog to record the pages you open, your clicks, and session recordings of your screen. Recordings of the landing pages and of the public demo are kept as they are; your own journal screens are masked — text is replaced with asterisks and images are blocked, so figures, account names and transcripts do not leave your browser. We never send your email or user id to PostHog. If you decline, none of this loads at all.
• Visitor counts — a cookieless page counter (Vercel Web Analytics) that runs for everyone. It writes nothing to your device: visitors are counted by a hash computed on the server, so it cannot follow you between days, browsers or sites. It tells us how many people arrived, never who they were.

To provide the journal, generate retrospective AI reviews of your trades and sessions, show your statistics, and operate and secure the Service. We do not use your trading data to train third-party models.

• Performance of our contract with you — running the journal: storing your trades, tags, notes, statistics and account settings. Without this the Service cannot work.
• Your request / consent — optional features you trigger yourself: recording a voice note, transcribing it, and generating an AI review. You can use the journal without them, and withdraw at any time by not using them and deleting what you recorded.
• Our legitimate interests — keeping the Service secure and abuse-free (rate limits, audit of suspicious activity) and understanding aggregate, non-identifying usage to improve the product.
• Legal obligation — billing and tax records, which are kept by Paddle as the seller of record under its own retention rules.

The Service runs on managed infrastructure and uses processors located in the United States and the European Union, so your data is transferred outside your country — including outside Canada and, for EU/UK users, outside the EEA/UK. Where such a transfer needs a safeguard, it relies on the European Commission’s Standard Contractual Clauses (or the UK equivalent) in our processors’ data-processing terms.

For users in Canada: this is the disclosure required by PIPEDA and Quebec’s Law 25 that personal information may be stored and processed outside your province and outside Canada, where it is subject to the laws of that jurisdiction.

• Supabase — database, authentication, and file storage.
• Vercel — hosting and delivery of the website and app.
• Paddle — payments, invoicing and tax as our Merchant of Record; Paddle receives your billing details, not your trading data.
• Anthropic (Claude) — generating trade/session reviews from your data.
• OpenAI (Whisper) — transcribing your voice notes to text.
• PostHog — product analytics and session replay; sets one analytics cookie. Loaded only after you accept, and never before.
• Vercel Web Analytics — cookieless visitor counts, running for everyone.
• Resend — transactional email (sign-in, password reset, notifications).
• Groq — speech-to-text for voice notes, used in place of OpenAI when configured.
• Sentry — crash and error reporting from the app.
• Telegram — only if you connect it yourself, to deliver notifications you asked for.

These processors handle data only to provide their function and under their own terms.

Data is stored on managed infrastructure with row-level security, so each user can access only their own records. Access is authenticated and scoped per user. No method of storage is perfectly secure, but we apply reasonable safeguards.

We keep your data while your account is active. You can delete individual records or your whole account at any time.

• Account deletion — deleting your account removes your profile, trades, notes, voice recordings, screenshots and share cards from our live systems. Deletion starts at once and completes within 30 days; if any stored file cannot be removed on the first pass, it is retried rather than left behind.
• Backups — copies may persist in encrypted infrastructure backups for up to 30 days after deletion, then they age out.
• Voice notes — the audio file is deleted when you delete the note or the account; a transcript exists only for as long as its note does.
• Billing records — kept by Paddle as seller of record for as long as tax law requires, independently of your account with us.
• Security logs — kept short-term for abuse prevention, then discarded.

Depending on your location (including the EU/UK under GDPR), you may access, correct, export, or delete your data, and object to or restrict certain processing. To exercise these rights, contact support@traderswatcher.com.

We use essential cookies for authentication — those are needed for you to stay signed in, and they are always on. Everything else waits for your answer: the analytics cookie set by PostHog is what lets a sign-up a week later still be linked to the post you first arrived from, and it is written only after you accept. Decline, and no analytics script is loaded at all — not a silenced one, none. The one thing that keeps running either way is the cookieless visitor counter described above: it stores nothing on your device, so there is nothing for you to consent to. We use no advertising cookies, we do not track you across other sites, and we do not sell your data.

You can change your mind at any time, and it takes the same one click either way:

The choice is stored in this browser only. On another browser or device you will be asked again.

Questions about privacy: support@traderswatcher.com.