Legal

Privacy Policy

Last updated: 2026-10-21

This is a working draft pending legal review. It describes our actual data practices; please consult the operator before relying on it as a final legal document.

Who we are

Trader+AI ("we", "us") operates the trading journal and AI agent service at traderplus.ai. For privacy questions or to exercise your rights, contact [email protected].

What we collect

  • Account: email, name, password (hashed), and an optional avatar.
  • Trading data: trades, account balances and equity snapshots, and connector status, sent by your MetaTrader Expert Advisor or imported via CSV.
  • Agent data: your chat messages with the Financial Agent (kept in your conversation history until you delete them; the internal processing records of each exchange lose their message text after 90 days), your journal entries and tags, questionnaire answers, and a behavioral profile the agent derives from your activity to personalize its guidance.
  • Payments: handled by our payment processors; we store subscription status and, for manual card-to-card payments, a receipt image you submit.
  • Usage analytics: page views, web-vitals and feature usage sent to Google Analytics and Plausible: in the EEA, the UK and Switzerland only if you accept, and elsewhere on notice with an opt-out you can use at any time. Our own record of product milestones (signup, connecting an EA, your first synced trade, first insight, and when you view or click an upgrade prompt) is written only if you actively accept, wherever you are. If you decline, none of it is collected.
  • Account and billing records: we always keep a record of payments, subscription changes, password changes and successful logins. These are not analytics (we need them to run your subscription and to keep your account secure), and they are kept whether or not you accept analytics.
  • Technical logs: IP address and user-agent on inbound requests, kept short-term for security and debugging.

Why we use it (legal bases)

To provide the service and your account (contract); to personalize guidance and improve the product (legitimate interests, or consent for optional analytics); to process payments and meet tax and accounting obligations (legal obligation); and to secure the service and prevent abuse (legitimate interests).

Who we share it with (processors)

We do not sell your data. We share the minimum necessary with service providers who process it on our behalf:
  • Stripe: card payments and subscriptions.
  • Google (Gemini) and Groq: the AI models that power the agent. Your prompts and the relevant trading context are sent to generate responses.
  • Resend: transactional email (verification, password reset).
  • Google Analytics: usage analytics and web-vitals. In the EEA, the UK and Switzerland it loads only with your consent; elsewhere it loads on notice and you can turn it off at any time. Sets the _ga cookies and can associate activity with your account.
  • Plausible Analytics: privacy-focused page-view analytics. Loaded only with your consent. It sets no cookies and builds no cross-site profile, but it does receive your IP address and the page being viewed.
  • Cloudflare: content delivery and security.
  • Telegram: optional notifications and the manual card-to-card payment flow.

How long we keep it

Your account and content (trades, journals, your conversation history and what the agent has learned about you) stay while your account exists, including after a paid plan ends or is cancelled, so the agent keeps its context. You can delete individual conversations and remove what the agent learned at any time.

For each exchange with the Financial Agent we also keep internal processing records, in full for 90 days, so the feature works and so we can investigate problems.

After 90 days the message text, the tool inputs and any error detail are deleted from those records. What remains for a further period is a technical record of the exchange (which model answered, which tools it used, how long it took, what it cost), still connected to your account. It is deleted after 365 days.

Separately, we keep a de-identified quality record. It contains none of your messages, no name and no account number, only which model answered, which tools it used, the timing, the cost, and how long the messages were. Turns of the same conversation are grouped using a key we derive with a secret kept outside the database, so these records cannot be linked back to you from the stored data alone. They are not fully anonymous: because we hold that secret, we can still find and delete yours if you ask us to. We keep them to make the agent better.

Technical logs that identify a device (the IP address and browser recorded with an incoming request) are removed after 90 days, or after 365 days in security audit logs, while the underlying record is kept. Usage analytics are deleted after 365 days. Financial records may be retained as required by law, in anonymized form. We keep encrypted backups for disaster recovery; they are not edited later, so copies can remain in them for a limited time.

Your rights

You can access and download your data, correct it, close your account (which retains your data so you can return), or request permanent erasure of your personal data. To exercise any of these rights, email [email protected]. Depending on your location you may also have the right to object, restrict processing, or lodge a complaint with a supervisory authority.

Cookies and analytics

Essential cookies keep you logged in, remember your language, record your analytics choice, and note which of the two regimes below applies to you; these always load. Optional measurement is three things: Google Analytics, which sets the _ga cookies and can associate activity with your account; Plausible, which is cookieless but still receives your IP address and the page you are on; and a first-party cookie (tpai-ft) that records the campaign or referring site of your first visit and is kept for 90 days, so we can tell which of our own posts and partners bring people here. We use that first-visit source ourselves, and while measurement is active it also reaches Google Analytics (in the sign-up event) and Plausible (as part of the page address); it is never sold. Where you are decides what happens before you choose: in the EEA, the UK and Switzerland none of those three is loaded or stored until you accept, and everywhere else they begin on notice and you can turn them off at any time from “Manage cookies” in the footer. Either way an explicit refusal is remembered in your browser and is never undone by a later change to this page, and we honour Global Privacy Control: if your browser sends that signal we treat it as a refusal without asking. If you decline, none of the three loads, the _ga cookies are deleted, and nothing in the product stops working.

Changes

We may update this policy; material changes will be reflected in the "last updated" date above.