TradePerformance Analytics Corp. ("TradePerformance", "we", "us", or "our") operates the website tradeperformanceapp.com and the TradePerformance application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.
By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.
On this website (pre-launch):
The TradePerformance application has not launched yet. Today, this website collects only two things: the email address you submit to join the founders list, and anonymous usage analytics described in Section 5. Everything below describing accounts, payments, and trading data applies to the application once it is available to you.
Information you provide directly:
Information collected automatically:
Trading data you import:
When you import trade data from ATAS, Rithmic, or other platforms, that data is stored in your account and used solely to provide the journaling and analytics features of the Service. We do not use your trading data for any commercial purpose beyond providing you the Service.
We use the information we collect to:
We do not sell your personal information to third parties. We do not share your trading data with any third party except as necessary to operate the Service (e.g., cloud hosting).
Your data is stored on secure servers provided by Supabase. We implement industry-standard security measures including encryption in transit (TLS/SSL) and at rest, access controls, and regular security reviews.
No method of transmission over the internet is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.
Your account data (including all journal entries and trade data) is stored for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us at support@tradeperformanceapp.com.
How long we keep things. Founders-list email addresses are kept until you unsubscribe or ask us to delete them, and no longer than 24 months after the product launches if you never become a customer. Account and trading data is kept while your account is active and deleted within 30 days of an account-deletion request. Analytics data is retained by PostHog for 12 months. Server logs are kept for up to 90 days for security and troubleshooting. Where we are required to keep records for tax or legal reasons, we keep only what the law requires.
If there is a data breach. If personal information in our care is lost or accessed without authorisation and it creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify you directly, as required by PIPEDA. Where GDPR applies, we will notify the relevant supervisory authority within 72 hours of becoming aware, and notify you where the breach is likely to result in a high risk to your rights.
Service providers we use. We share data with the following third parties, each only to the extent needed to operate the Service. Several of them process data on servers in the United States.
We may also share information for:
We do not share your personal information for advertising or marketing purposes with third parties.
We use PostHog for product analytics on this website. PostHog sets a first-party cookie and stores an anonymous identifier in your browser so it can tell whether a visit is new or returning. It records page views and a single event when a founders-list signup succeeds. It does not receive your email address, and we do not use it to build advertising profiles.
We ask before we measure. Analytics are not loaded and no analytics cookie is stored until you choose "Accept" on the cookie banner shown on your first visit. If you decline, PostHog is never loaded. You can change your mind at any time using the Cookie preferences link in the footer — withdrawing consent deletes the analytics cookie and identifier from your browser.
PostHog processes this data on servers in the United States. We also honour your browser's "Do Not Track" setting: if it is enabled, we treat that as a decline and never ask.
The application (once launched) will also use strictly necessary cookies to keep you signed in and remember your preferences.
You can control or clear cookies through your browser settings. Disabling strictly necessary cookies may affect functionality. We do not use third-party advertising cookies, and we do not sell your personal information.
Several features of the application use third-party AI providers. We operate a bring-your-own-key (BYOK) model: you supply your own API key for a provider such as OpenAI or Anthropic, and requests are sent from your session directly to that provider using your key.
AI output can be inaccurate. It is informational only and is not financial advice.
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, you have the right to:
To exercise these rights, contact us at support@tradeperformanceapp.com. We will respond within 30 days.
The Service is operated from Canada. Several of our service providers — including Beehiiv, PostHog, Vercel, Supabase, and Stripe — process data on servers in the United States, so your information may be transferred to and processed in Canada and the United States.
For users in the European Economic Area and the United Kingdom, our legal bases are:
You may object to processing based on legitimate interests at any time by contacting us.
Your rights in the EEA and UK. In addition to the rights listed in Section 7, if the GDPR or UK GDPR applies to you, you have the right to access your personal data, correct it, have it erased, restrict or object to how we process it, receive it in a portable machine-readable format, and withdraw consent at any time without affecting processing already carried out. To exercise any of these, email support@tradeperformanceapp.com; we respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority, or with the Information Commissioner's Office in the UK.
How we protect international transfers. Canada has an adequacy decision from the European Commission, so transfers from the EEA to us are permitted on that basis. Where our service providers process data in the United States, those transfers are made under the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) as incorporated into each provider's data processing agreement.
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date and, where appropriate, by email.
If you have questions about this Privacy Policy or our data practices: