PRIVACY POLICY
Last updated: June 24, 2026
This privacy notice describes how TradeReview ("we," "us," or "our") collects, stores, uses, and shares ("processes") your personal information when you use our services ("Services"), including:
- Our website at https://tradereview.app/
- Our web application at https://tradereview.app/web/
- Our mobile applications for iOS and Android (TradeReview)
- Any related sales, marketing, or support interactions
Questions or concerns? Contact us at [email protected].
WHO WE ARE (DATA CONTROLLER)
The data controller responsible for your personal information is:
Artsiom Yatskevich (sole proprietor)
NIP: 8943195062
Świętego Mikołaja 8/11/lok. 208
50-125 Wrocław, Poland
Email: [email protected]
Because we are established in the European Union, we do not appoint a separate EU representative under Article 27 GDPR.
SUMMARY OF KEY POINTS
What personal information do we process? We process information you provide when creating an account, journaling trades, connecting brokers, subscribing to paid plans, and contacting support. We also process limited technical and usage data. See Section 1.
Do we process sensitive personal information? We do not intentionally collect special categories of personal data (such as health, biometric, or political data).
Do we receive information from third parties? Yes. When you sign in with Google or Apple, connect a broker, or pay through Stripe or mobile app stores, we receive information from those providers as described below.
How do we process your information? To provide and improve the Services, secure accounts, process subscriptions, send service and report emails, and comply with law. See Section 2 and Section 3.
When do we share personal information? With service providers that help us operate the Services, and in limited legal or business-transfer situations. See Section 4.
Do we use cookies and tracking? Yes. Essential cookies and local storage are used for authentication and settings. Analytics cookies are used only after you consent. See Section 5 and our Cookie Policy.
What are your rights? Depending on your location, you may have rights to access, correct, delete, restrict, or port your data, and to object or withdraw consent. See Section 10.
How can you exercise your rights? Email [email protected] or delete your account in the app under Account settings.
TABLE OF CONTENTS
- WHAT INFORMATION DO WE COLLECT?
- HOW DO WE PROCESS YOUR INFORMATION?
- WHAT LEGAL BASES DO WE RELY ON?
- WHEN AND WITH WHOM DO WE SHARE PERSONAL INFORMATION?
- DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
- HOW DO WE HANDLE SOCIAL LOGINS?
- HOW LONG DO WE KEEP YOUR INFORMATION?
- HOW DO WE KEEP YOUR INFORMATION SAFE?
- DO WE COLLECT INFORMATION FROM MINORS?
- WHAT ARE YOUR PRIVACY RIGHTS?
- CONTROLS FOR DO-NOT-TRACK AND GLOBAL PRIVACY CONTROL
- DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
- DO WE MAKE UPDATES TO THIS NOTICE?
- HOW CAN YOU CONTACT US?
- HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?
1. WHAT INFORMATION DO WE COLLECT?
Personal information you provide to us
In Short: We collect personal information that you provide when you register, use the Services, connect brokers, subscribe, or contact us.
Account and profile information
- Email address, display name, first and last name, profile picture
- Timezone, language, currency, dashboard and UI preferences
- Onboarding answers (trader type, experience, markets, goals)
- Notification preferences for email and push
Trading journal data
- Trades, executions, symbols, quantities, prices, fees, profit and loss
- Tags, strategies, cash transactions, notebook notes, and note templates
- Images you upload to trades or notes
Broker connection data
- OAuth access and refresh tokens for supported brokers (such as Alpaca and cTrader)
- Login credentials you provide for broker sync where supported (such as MT5 and TradeLocker), stored to retrieve your trading data at your request
- Linked account identifiers and sync metadata
Subscription and payment information
- Subscription plan, status, billing period, and payment history stored in our systems
- Stripe customer ID for web subscriptions
- Apple App Store or Google Play receipt and transaction identifiers for mobile purchases
- We do not store full payment card numbers
Support communications
- Information you send us by email or through support channels
Information collected automatically
In Short: We collect certain technical and usage information when you use the Services.
- Log and usage data: IP address, browser type, device type, operating system, app version, timestamps, pages or features used, and error or crash reports
- Authentication data: refresh tokens stored in secure cookies and local storage to keep you signed in
- Push notification data: device tokens and user identifiers when you enable push notifications through Pushwoosh
We do not collect precise GPS location from your device. Our infrastructure may infer approximate location (such as country) from IP address for security and service operation.
Google API
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide and improve the Services, communicate with you, keep accounts secure, and comply with law.
- Provide the Services: create and manage accounts, store and display your trading journal, sync broker data, process subscriptions, and deliver core app features
- Communicate with you: send service messages, trade reports, app updates, and support responses based on your notification settings
- Improve and secure the Services: troubleshoot errors, analyze usage trends where permitted, prevent abuse, and maintain infrastructure
- Marketing: send promotional or educational emails where permitted by law and your preferences; you can opt out at any time
- Legal compliance: respond to lawful requests and enforce our terms
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
In Short: We process personal information only when we have a valid legal reason under applicable law.
If you are located in the EEA, UK, or Switzerland, this section applies to you.
- Performance of a contract (Art. 6(1)(b) GDPR): providing account registration, trade journaling, broker sync, subscriptions, and other core Services you request
- Legitimate interests (Art. 6(1)(f) GDPR): securing the Services, preventing fraud, improving product quality, sending service-related communications, and limited direct marketing where our interests are not overridden by your rights
- Consent (Art. 6(1)(a) GDPR): optional analytics cookies (Google Analytics and PostHog), granted via the website cookie banner or by agreeing to our Privacy Policy when logging in to the app; push notifications where required; and certain marketing communications where consent is required
- Legal obligation (Art. 6(1)(c) GDPR): tax, accounting, and regulatory requirements
Withdrawing consent: Where we rely on consent, you may withdraw it at any time through the cookie banner or footer link on our website, notification settings, email unsubscribe links, or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.
If you are located in Canada, this section applies to you.
We may process your information with your consent or as permitted under applicable Canadian privacy law. You may withdraw consent subject to legal or contractual restrictions.
4. WHEN AND WITH WHOM DO WE SHARE PERSONAL INFORMATION?
In Short: We share personal information with service providers that process data on our behalf, and in limited other situations.
Service providers (subprocessors)
| Provider | Purpose | Typical location |
|---|---|---|
| Microsoft Azure | Application hosting, database, file storage, queues, and backend services | EEA and/or other regions per our Azure configuration |
| Cloudflare | Static website hosting for our marketing site | Global |
| Google Sign-In and Google Analytics (with consent) | US / EU | |
| Apple | Sign in with Apple and App Store in-app purchases | US / EU |
| Stripe | Web subscription payments | US |
| Klaviyo | Email delivery, subscriber profiles, and event-triggered messages | US |
| PostHog | Product analytics and error tracking (with consent) | Per our PostHog configuration |
| Pushwoosh | Mobile push notifications | US |
| TradingView | Embedded chart widgets | US |
We use written agreements requiring these providers to protect personal information and process it only on our instructions.
Other sharing situations
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets
- Legal requirements: when required by law, court order, or to protect rights, safety, and security
International transfers
When personal information is transferred outside the EEA or UK, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, and processor data protection commitments.
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
In Short: We use essential cookies and local storage to operate the Services. We use analytics technologies only after you consent.
Essential technologies include authentication cookies (such as RefreshToken), access tokens in local storage, and preference storage for themes, filters, and UI settings.
With your consent, we use Google Analytics 4 and PostHog to understand how the web application is used. We do not use advertising cookies or sell your personal information for cross-context behavioral advertising.
Details are in our Cookie Policy. You can manage analytics consent through the cookie banner or footer link on our website, or when logging in to the app.
6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
In Short: You can register or log in using Google or Apple.
If you choose social login, we receive information from the provider such as your name, email address, profile picture, and a provider-specific user ID. We use this information only to create and authenticate your account as described in this notice.
We do not receive your social media friends list. The provider’s use of your information is governed by its own privacy policy.
7. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep personal information for as long as necessary to provide the Services and fulfill the purposes in this notice.
- Account data: kept while your account is active
- Authentication tokens: until logout, expiry, or account deletion
- Marketing profiles: we request deletion from Klaviyo when you delete your account
- Payment records: retained as required for tax, accounting, and legal obligations
- Backups: deleted data may remain in isolated backups for a limited period before being overwritten
When we no longer need personal information, we delete or anonymize it unless retention is required by law.
8. HOW DO WE KEEP YOUR INFORMATION SAFE?
We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and secure cloud infrastructure. No method of transmission or storage is 100% secure.
9. DO WE COLLECT INFORMATION FROM MINORS?
Our Services are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, contact us at [email protected].
10. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: You may have rights to access, correct, delete, restrict, port, or object to processing of your personal information, depending on your location.
EEA, UK, and Switzerland
- Right of access, rectification, erasure, restriction, and portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent where processing is consent-based
- Right not to be subject to solely automated decision-making with legal or similarly significant effects (we do not use such decision-making)
You may lodge a complaint with your local supervisory authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO). UK residents may contact the ICO.
Account information
- Update profile and notification settings in the app
- Export trades to CSV from the app
- Delete your account under Account settings; we will delete active account data and request deletion of related marketing profiles
Marketing communications
You can opt out using unsubscribe links in emails, notification settings in the app, or by emailing [email protected].
11. CONTROLS FOR DO-NOT-TRACK AND GLOBAL PRIVACY CONTROL
There is no uniform standard for Do-Not-Track signals. We do not respond to DNT browser signals.
If your browser sends a Global Privacy Control (GPC) opt-out signal, we treat it as a decline of non-essential analytics cookies in our web application.
12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: Residents of certain US states may have additional rights regarding access, correction, deletion, and opt-out of certain processing.
Categories of personal information collected in the last 12 months
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, email, account ID, IP address, online identifiers | YES |
| B. California Customer Records | Name, contact information, employment or financial information beyond what we collect | NO |
| C. Protected classification characteristics | Gender, age, race, ethnicity, and similar data | NO |
| D. Commercial information | Subscription history, purchase records, payment status | YES |
| E. Biometric information | Fingerprints, voiceprints | NO |
| F. Internet or network activity | App usage, analytics events, interactions with the Services | YES |
| G. Geolocation data | Precise device location | NO |
| H. Sensory information | Images you upload to the Services | YES |
| I. Professional or employment information | Business contact details, job history | NO |
| J. Education information | Student records | NO |
| K. Inferences | Profiles drawn from collected information | NO |
| L. Sensitive personal information | Special category data under state law | NO |
We do not sell personal information or share it for cross-context behavioral advertising.
Your rights may include access, correction, deletion, portability, and opt-out of certain processing. To exercise these rights, email [email protected]. We will verify your request before responding.
13. DO WE MAKE UPDATES TO THIS NOTICE?
We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date. Material changes may be communicated through the Services or by email where appropriate.
14. HOW CAN YOU CONTACT US?
Email: [email protected]
Postal address: Artsiom Yatskevich, Świętego Mikołaja 8/11/lok. 208, 50-125 Wrocław, Poland
15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
Depending on applicable law, you may request access to, correction of, or deletion of your personal information.
- Email us at [email protected] with your request. We respond within the time required by applicable law (generally within 30 days for GDPR requests).
- Update your account in Account → Settings.
- Export trades using the CSV export feature in the app.
- Delete your account in Account settings. This permanently deletes your active account data from our systems and triggers deletion of related third-party marketing profiles where applicable.