Privacy Policy

1. Information we collect

We collect only what the product needs to work:

• Account information — email address, password credential handled by our authentication provider, display name and account creation date.
• Uploaded screenshots and charts — images you upload for analysis, stored in a private storage bucket together with the file name.
• AI analysis inputs and outputs — the symbol, timeframe and image you submit, and the generated analysis (trend, patterns, levels, confidence breakdown, summary).
• Usage and activity information — daily usage counters against your plan limits, saved alerts and alert trigger history, watchlist symbols, Academy lesson progress and quiz scores, and product analytics events (for example: analysis started, limit reached).
• Device and browser information — technical data present in ordinary web requests, such as IP address and user agent, processed by our hosting and backend providers for delivery, security and abuse prevention.
• Subscription and payment-related information — your plan, subscription status, renewal period and identifiers returned by Stripe.
• Connected-account information — if you choose to connect a supported exchange or broker, the API credentials you supply and the balances retrieved from that account.

2. Payments

Subscription payments are processed by Stripe. Card details are entered on Stripe's own checkout pages. Traidilon does not receive or store full card numbers. We store the plan, subscription state and Stripe identifiers needed to give you access to the features you paid for.

3. Why we process your data

• To provide the service: run chart and symbol analysis, store your history, alerts, watchlists and Academy progress.
• To operate accounts and authentication.
• To bill subscriptions and enforce plan limits.
• To keep the service secure, prevent abuse and diagnose faults through error and system logs.
• To understand product usage in aggregate and improve the product.
• To communicate with you about your account or support requests.

4. Legal bases (where the GDPR or similar law applies)

• Performance of a contract — providing the service and your subscription.
• Legitimate interests — security, abuse prevention, product analytics and service improvement.
• Consent — where consent is required, for example optional communications or non-essential technologies, and you may withdraw it at any time.
• Legal obligation — accounting and tax records relating to payments.

5. Third-party services and processors

The following services are used by the current implementation:

• Supabase — Database, authentication and file storage for your account data and uploads.
• Stripe — Subscription checkout, billing and payment processing.
• Lovable AI Gateway (Google Gemini models) — Generating chart and symbol analysis from your inputs.
• Yahoo Finance — Public market price data (OHLCV) for supported symbols.
• Binance public market data — Public crypto price data (OHLCV) for supported symbols.
• Connected exchange/broker APIs (Binance, Coinbase, Kraken, Alpaca) — Read-only balance retrieval, only when you choose to connect an account.

6. International transfers

Our providers may process data outside your country, including outside the European Economic Area. Where required, transfers rely on the safeguards offered by those providers, such as standard contractual clauses. The exact hosting regions and safeguards for each provider are being confirmed and will be described here once finalized.

7. Retention

• Analyses, uploaded images, alerts, watchlists and Academy progress are kept until you delete them or delete your account.
• Usage counters, analytics events and system logs are kept for operational and security purposes.
• Billing records are kept as long as required for accounting and tax purposes.
• Connected-account credentials are kept until you disconnect that account.

8. Deletion

You can delete individual analyses from your History, which also removes the stored image. You can disconnect a connected account at any time. To delete your entire account and its data, use the deletion option in Settings or contact us at our privacy contact (email address being finalized).

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, and to lodge a complaint with your supervisory authority. Contact our privacy contact (email address being finalized) to exercise these rights. Data protection contact: no data protection officer has been appointed at this time.

10. Security

We apply reasonable technical and organisational measures: access to your rows is restricted per user at the database level, uploaded images are held in a private bucket and served through short-lived signed links, connected-account credentials are encrypted before storage, and traffic is served over HTTPS. No online service can be guaranteed to be completely secure.

11. Children

Traidilon is not intended for people under the age required to enter a contract in their country, and in any case not for children under 16.

12. Changes and contact

We may update this policy as the product changes. The date at the top of this page shows the last update. Questions: our privacy contact (email address being finalized). Postal address: a registered address that is being finalized and will be published here once confirmed.