Privacy Policy

Version 2.0 — Effective 1 July 2026

Data Controller

TradeCenter (operated by the owner, UAE). EU/EEA users may contact our representative at: support@tradecenter.app.

What We Collect

• Account data: email address, hashed password, username.
• Trade journal data: trade entries, notes, screenshots you upload.
• Broker credentials: encrypted with Fernet (AES-128-CBC + HMAC-SHA256); decrypted only in server memory when needed.
• Usage data: AI query logs, scanner signal outcomes (for performance measurement).
• Technical data: IP address, browser type (for security logging, retained 30 days).
• Automated trading bots: the Python trading bots you create or convert from Pine Script run on TradeCenter's servers in isolated, resource-limited sandboxes. We store the bot code, its configuration, and its execution logs.

Automated Trading Bots & Order Execution

If you deploy a trading bot, you should understand exactly what it does:

• Live market data: bots fetch real market price data (OHLCV) to compute their trading signals. They do not receive or process visual charts — only numerical price/volume data.
• Automated order placement: when you enable live mode (disable "dry run") and connect your broker, a bot can automatically place buy and sell orders in your connected brokerage account (e.g. Interactive Brokers) without further confirmation, according to its strategy. In dry-run mode (the default) it only simulates orders and places nothing.
• Trade notifications: whenever a bot places or simulates an order, TradeCenter reads that event from the bot's log and sends you a Telegram alert, and records live trades for monitoring. We do not share these with third parties.
• Your responsibility: automated trading carries risk of financial loss, including total loss. You are solely responsible for any orders your bots place. TradeCenter is a tool, not an investment adviser, and does not guarantee any bot's behaviour or performance.
• Isolation: each bot runs in its own sandbox with dropped privileges, a read-only filesystem, and capped CPU/memory. Bots cannot access other users' data or your stored credentials.

Legal Basis (GDPR)

We process your data on the basis of: (a) contract performance (providing the service you signed up for); (b) legitimate interests (security, fraud prevention, service improvement); (c) consent (optional analytics).

Data Storage & Transfers

Data is stored on OVH servers in Gravelines, France (EU). Database hosted on Supabase (EU region). We do not transfer personal data outside the EEA except where necessary to fulfill your broker connection requests (e.g., Interactive Brokers servers).

Retention

Account data is retained while your account is active plus 30 days after deletion. Security logs are deleted after 30 days. You may request deletion at any time via Settings → Delete Account.

Your Rights (GDPR)

You have the right to: access, rectify, erase, restrict, or port your data; withdraw consent at any time; lodge a complaint with your national supervisory authority.

Cookies

We use only a single session cookie (httpOnly, SameSite=Strict) required for authentication. No tracking cookies, no third-party ad cookies.

Contact

Privacy questions: support@tradecenter.app