1. What we collect
Account data (email, display name), trading data you log or import (trades, journal entries, connected broker read-only data), usage analytics, and — if you connect them — encrypted API keys for Binance/MT4/MT5 and your Telegram chat ID.
2. How we use it
To run the product: analyze your trades, generate AI insights and briefs, sync broker data, send alerts you enabled, and improve the service. We never sell your personal data to anyone.
3. AI processing
Trade statistics and journal text you submit may be sent to our AI providers (Groq) to generate analysis. We send the minimum needed for the feature and never include your API keys or passwords in AI prompts.
4. Broker API keys
Keys are encrypted at rest with AES-256 before storage. We only request read-only permissions. You can delete a connection at any time from the Connections page, which removes the stored keys.
5. Storage & security
Data is stored on Supabase infrastructure with encryption at rest and TLS 1.3 in transit. Access is restricted by row-level security so only your account can read your rows.
6. Cookies
We use strictly necessary cookies for authentication sessions and a small set of local-storage keys for preferences (theme, language, dismissed banners). No third-party advertising cookies.
7. Data retention & deletion
Your data is kept while your account is active. You may delete your account from Settings; this permanently removes your profile, trades, journal, AI memories, and connections within 30 days.
8. Your rights
You can access, export, correct, or delete your data at any time. Contact us in-app to exercise any right under GDPR or similar regulations.
9. Not financial advice
CoreTrader provides analytics and educational insights. Nothing in the product constitutes financial, investment, or trading advice. Trading involves substantial risk of loss.
10. Changes
We may update this policy. Material changes will be announced in-app before they take effect.
Questions? Contact us via the Settings page inside the app.