1. Who is responsible for your data
TRADLYMA is the data controller for the personal data described here. Contact: maoradmoni1111@gmail.com.
2. What we collect
- Account data: email address, name or display name, language preference, authentication identifiers (including Google sign-in identifiers), password hashes handled by our authentication provider.
- Subscription data: plan, plan status, renewal dates and payment status. Card numbers are handled by the payment provider and never reach our servers.
- Trading data: connected account metadata (broker name, server name, login number, platform), balance, equity, free margin, imported deals and trades, and the risk rules you configure.
- Journal content: notes, thoughts, tags and setup screenshots you upload.
- Partner data: application details, referral records and payout information for partner-program participants.
- Technical data: IP address, device and browser information, timestamps, error logs and basic usage events needed to run and secure the Service.
We do not store your broker master/trading password. Connections use a read-only investor password, which is passed to the connectivity provider to establish the link and is not retained by us.
3. Why we use it, and on what legal basis
- To provide the Service (accounts, journal, imports, analytics, academy access) — performance of a contract.
- To bill and prevent abuse — contract and legitimate interests.
- To secure the platform (logging, fraud and intrusion prevention) — legitimate interests.
- To communicate service messages — contract; marketing messages — consent, withdrawable at any time.
- To comply with law (tax, accounting, sanctions, lawful requests) — legal obligation.
4. Who we share it with
We share personal data only with processors who help us run the Service: cloud hosting and database infrastructure, authentication, broker connectivity (MetaApi), market and economic-calendar data sources, email delivery, payment processing, and error monitoring. Each processor is bound by contract to use the data only on our instructions. We do not sell your personal data and we do not share your trading history for advertising.
We may disclose data when legally required, to enforce our Terms, or to protect the rights and safety of users or third parties.
5. International transfers
Our providers may process data outside your country, including in the EU and the United States. Where required, transfers rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.
6. How long we keep it
- Account, journal and trading data: while your account is active, then deleted or anonymised within 90 days of account deletion.
- Billing and tax records: as long as tax and accounting law requires (commonly up to 7 years).
- Security and error logs: typically up to 12 months.
7. Your rights
Depending on where you live (including under the GDPR and similar laws), you may have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent. You can also lodge a complaint with your local supervisory authority. To exercise a right, email maoradmoni1111@gmail.com; we respond within 30 days.
8. Security
Data is encrypted in transit, stored in access-controlled infrastructure, and protected by row-level security so each user can only reach their own records. Setup screenshots are stored in a private bucket accessible only to the owning account. No system is perfectly secure; you are responsible for protecting your own credentials.
9. Children
The Service is not directed at anyone under 18, and we do not knowingly collect their data.
10. Changes
We will post updates here and, for material changes, notify you in the Service or by email before they take effect.