Privacy Policy

CoreTrade is built with privacy in mind. We collect only what we need to provide the service, never sell your data, and give you full control over your information.

1. Information We Collect

Account information: Email address, display name, country, timezone, and currency preference when you register.

Trading data: All trades, notes, statistics, and journal entries you create. This data belongs to you.

Payment information: We do not store payment card details. Payments are processed by Paddle (our Merchant of Record). We only store your subscription status and billing dates.

Usage data: Basic usage information such as login timestamps and feature usage to improve the service.

2. How We Use Your Information

• To provide and maintain the CoreTrade service
• To process your subscription and send billing communications
• To send transactional emails (verification, password reset)
• To send weekly trading reports if you have opted in
• To improve the service based on usage patterns
• To respond to your support requests

We do not use your trading data for advertising, profiling, or selling to third parties.

3. Data Sharing

We share your data only with the following service providers necessary to operate CoreTrade:

• Supabase — Database and authentication (servers in the EU/US)
• Paddle — Payment processing and subscription management (Merchant of Record)
• Resend — Transactional email delivery
• Vercel — Application hosting and infrastructure

We do not sell, rent, or share your personal information with any other third parties.

4. Data Retention

We retain your data for as long as your account is active. If you delete your account, all your personal data and trading records are permanently deleted within 30 days. Some data may be retained in backups for up to 90 days before being purged.

5. Your Rights

You have the right to:

• Access — View all data we hold about you
• Export — Download your trading data at any time from the Export section
• Correct — Update your account information in Settings
• Delete — Delete your account and all associated data from Settings → Danger Zone
• Opt-out — Unsubscribe from weekly reports in Settings → Notifications

To exercise any right, contact us at hello@mycoretrade.com.

6. Cookies & Tracking

CoreTrade uses only essential cookies required for authentication (session tokens). We do not use advertising cookies, tracking pixels, or third-party analytics. We do not use Google Analytics or similar services.

7. Security

We take security seriously. All data is encrypted in transit (TLS) and at rest. Authentication is handled by Supabase with industry-standard JWT tokens. We never store passwords in plain text.

If you discover a security vulnerability, please report it to hello@mycoretrade.com before public disclosure.

8. Children's Privacy

CoreTrade is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a child has provided personal information, we will delete it immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email. Your continued use of CoreTrade after changes take effect constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, contact us at hello@mycoretrade.com. We aim to respond within 2 business days.