Privacy Policy

TradeCraft ("we", "us", or "our") is a trading journal application built and operated by SystemAlpha. This policy explains what data we collect, how we use it, and your rights regarding that data.

By using TradeCraft you agree to the collection and use of information as described in this policy.

We collect only the data necessary to provide the service:

• Account information: your email address and authentication provider (email/password or Google OAuth)
• Trade data: entries you create or import, including prices, sizes, dates, fees, notes, tags, ratings, and checklist answers
• Trade screenshots and chart images you upload or link (for example TradingView snapshots)
• Broker reports you import (such as MT5 or Tradovate exports) and closed trades sent by the optional MT5 sync Expert Advisor
• Journal entries: daily sessions, weekly reviews, and pre-trade checks
• Playbooks, trading plans, watchlist ideas, and missed trades you record
• Prop firm account information you enter (firm, account size, rules, payouts, challenge status)
• AI provider keys you choose to save, stored encrypted and never shown back in full
• TradingView and Discord usernames you give us, used only to set up your indicator access
• App preferences stored locally in your browser (timezone, filters, layout)

TradeCraft only receives broker data you choose to send it: files you import, trades from the MT5 sync you install, or The5ers account data if you connect it. TradeCraft never places trades or moves funds on its own. The optional MT5 plugin's position sizer places an order only when you press Trade and confirm; it moves stops, closes part of a position or, with the Equity Defender on, closes trades only for the settings you turn on; and it reads your risk settings and prop firm limits from your journal. We do not collect payment information.

Your data is used exclusively to provide the TradeCraft service:

• Displaying your trades, analytics, and journal entries back to you
• Computing performance statistics (win rate, profit factor, expectancy, R-multiples, prop firm limits)
• Running the AI features you use, such as the coach and weekly review drafts
• Restoring your session when you return to the app

We do not sell your data. We do not use your trading data for any purpose other than powering your personal journal.

AI features are optional. When you use one, the trades and journal entries it needs are sent to the AI provider you select, using your own key where you have saved one. The provider processes that data under its own terms and privacy policy. If you don't use AI features, none of your data is sent to an AI provider.

All data is stored in a Supabase (PostgreSQL) database with row-level security enabled. This means your data is only accessible to your own authenticated session — other users cannot read it. Saved AI keys are kept in Supabase Vault and are only used server-side.

Data is hosted in Supabase's managed cloud infrastructure. Supabase's own privacy and security practices apply to infrastructure-level handling of your data.

TradeCraft uses the following third-party services:

• Supabase — database, file storage, and authentication (supabase.com)
• Vercel — hosting and content delivery (vercel.com)
• Google OAuth — optional sign-in via Google (accounts.google.com)
• Google Gemini, Groq, and Anthropic — only when you use AI features with that provider
• The5ers — only if you connect a The5ers account
• TradingView — only to fetch a chart snapshot you link to a trade

Each of these services has its own privacy policy. We do not share your trading data with any of these providers beyond what is required to deliver the service.

If you choose to sign in with Google, we access a limited set of information from your Google Account solely to create and secure your TradeCraft account:

• Your name and basic profile information
• Your email address
• Your Google account identifier

We use this information only to authenticate you, create your account, and display your identity within the app. We do not access your Gmail, Google Drive, Contacts, Calendar, or any other Google service, and we request no sensitive or restricted OAuth scopes.

TradeCraft's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not transfer it to third parties except as necessary to provide the service, comply with the law, or as part of a merger or acquisition. You can revoke TradeCraft's access at any time from your Google Account permissions.

You have the right to:

• Export all your trade data at any time via Journal Settings → Export
• Request a full copy of your stored data by emailing support@systemalpha.app
• Request deletion of your account and all associated data
• Correct inaccurate personal information

To exercise any of these rights, contact us at support@systemalpha.app.

TradeCraft uses cookies and browser local storage to keep you signed in and to remember your preferences. We do not use third-party tracking cookies or advertising cookies.

We may update this policy as the product evolves. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of TradeCraft after changes constitutes acceptance of the revised policy.

Questions about this policy? Email support@systemalpha.app.