Privacy Policy

1. Data Controller

The responsible party for data processing in connection with TJ TradeHub is:

2. What Data We Collect

We collect the following categories of personal data:

• Account data: Email address, display name, encrypted password (stored as a secure hash via Supabase Auth)
• Trading journal data: Trade entries, notes, performance metrics, and custom fields you enter manually
• MetaTrader credentials: Broker login credentials provided when connecting a MetaTrader account. These are transmitted to MetaAPI.cloud for read-only trade synchronization and are not stored on our servers in plaintext
• Subscription data: Billing status, subscription start/end dates. Payment details (card numbers, billing address) are processed exclusively by Stripe and never stored on our servers
• Usage data: Last activity timestamps used to manage MetaTrader connection efficiency
• Technical data: Session cookies required for authentication

3. Purpose and Legal Basis

We process your data for the following purposes:

• Providing the Service: Account management, journal functionality, MetaTrader synchronization (legal basis: contract performance)
• Payment processing: Billing and subscription management via Stripe (legal basis: contract performance)
• Transactional emails: Account verification, password reset, billing notifications (legal basis: contract performance)
• Service improvement: Anonymous usage analytics to improve platform performance (legal basis: legitimate interest)
• Cookies: Essential session cookies for authentication (legal basis: legitimate interest / consent)

4. Third-Party Service Providers

We use the following third-party processors to operate TJ TradeHub. All providers are bound by data processing agreements:

5. Data Transfers Outside Switzerland / EU

Some of our service providers are based in the United States. Data transfers to the US are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission and recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC). By using TJ TradeHub, you acknowledge that your data may be processed in the US under these safeguards.

6. Data Retention

• Account and journal data is retained for as long as your account is active
• Upon account deletion, all personal data is permanently deleted within 30 days
• Billing records are retained for 10 years as required by Swiss accounting law (OR Art. 958f)
• MetaTrader credentials are removed from MetaAPI upon account disconnection or subscription cancellation

7. Cookies and Local Storage

TJ TradeHub uses the following:

• Authentication cookies: Strictly necessary session tokens to keep you logged in. These cannot be disabled without breaking core functionality
• Cookie consent preference: Stored in localStorage to remember your cookie choice
• Advertising pixels (Meta Pixel & TikTok Pixel): Used to measure advertising performance and enable remarketing. These are only activated after you click "Accept" in the cookie banner (legal basis: consent). If you decline, no advertising pixel fires. You can withdraw consent at any time by clearing your browser storage.

We do not use Google Analytics. Advertising pixels are loaded exclusively with your consent and never before you accept cookies.

8. Your Rights

Under GDPR (for EU users) and the Swiss nDSG (Federal Act on Data Protection), you have the following rights:

• Right of access: Request a copy of all personal data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your account and all associated data
• Right to data portability: Request your trading data in a machine-readable format
• Right to restriction: Request that we limit processing of your data
• Right to object: Object to processing based on legitimate interests

To exercise any of these rights, contact us at support@tjtradehub.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• All data transmitted via HTTPS/TLS encryption
• Passwords stored as secure hashes (never in plaintext)
• Access to production systems restricted to authorised operators
• Payment processing handled entirely by Stripe (PCI-DSS Level 1 certified)

10. No Sale of Data

We do not sell, rent, or trade your personal data to any third parties for commercial purposes. Your trading data belongs to you.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or data requests, please contact us at:

support@tjtradehub.com