Privacy Policy

1. Introduction

Welcome to TradeWorkstation. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading journal and analytics platform.

2. Information We Collect

We collect the following types of information:

2.1 Information You Provide

• Account information (name, email address, password)
• Profile information (timezone, preferences)
• Trading data you choose to import or enter
• Journal entries and notes
• Communications with our support team

2.2 Third-Party Services

We may use third-party services for authentication, AI features, and data storage:

• Authentication: We use Supabase Auth for secure account management
• AI Features: AI-powered features are processed through third-party AI APIs
• Hosting: Our servers and database are hosted by trusted providers

• Your Google account email address
• Your name and profile picture (if available)
• OAuth tokens to access Google AI services on your behalf

Important: We use your Google OAuth tokens solely to access Google's Generative AI (Gemini) API for AI-powered features within the app. We do not access your Gmail, Google Drive, Calendar, or any other Google services.

2.3 WHOOP Integration (Optional)

If you choose to connect your WHOOP account, we collect the following health and biometric data with your explicit consent:

• Recovery Data: Recovery score, HRV (heart rate variability), resting heart rate, SpO2 (blood oxygen), and skin temperature
• Sleep Data: Sleep duration, sleep stages (light, deep, REM), sleep efficiency, sleep consistency, and respiratory rate
• Workout Data: Strain scores, workout type, duration, heart rate zones, and calories burned
• Cycle Data: Daily physiological cycles and strain accumulation
• Body Measurements: Height, weight, and max heart rate (if available)

Purpose: This data is used exclusively to:

• Display your health metrics within the app
• Analyze correlations between your physical wellness and trading performance
• Generate personalized insights to help optimize your trading routine

Your Control: WHOOP integration is entirely optional. You can connect or disconnect your WHOOP account at any time from the Health settings. When disconnected, we stop syncing new data. You may also request deletion of previously synced WHOOP data by contacting support.

2.4 Automatically Collected Information

• Device information (browser type, operating system)
• Usage data (pages visited, features used)
• IP address and approximate location

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Process and analyze your trading data
• Power AI features through third-party AI APIs
• Send you important updates about your account
• Respond to your requests and provide customer support
• Detect and prevent fraud or security issues
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party services that help us operate (e.g., Supabase for database hosting, Vercel for web hosting)
• AI Providers: When you use AI features, your prompts may be processed by third-party AI APIs
• WHOOP API: When you connect your WHOOP account, we communicate with WHOOP's servers to retrieve your health data using your authorized OAuth tokens. We do not share your data back to WHOOP.
• Legal Requirements: When required by law or to protect our rights

5. WHOOP Integration

Our app offers optional integration with WHOOP wearable devices. When you connect your WHOOP account:

• We request permission to access your recovery, sleep, workout, cycle, and body measurement data
• Your WHOOP OAuth tokens are stored securely and encrypted
• Data is synced periodically to keep your health metrics up to date
• You can disconnect your WHOOP account at any time from the Health settings
• Disconnecting stops future data syncing but does not automatically delete previously synced data

WHOOP data collection is governed byWHOOP's Privacy Policy. We encourage you to review their policy to understand how WHOOP handles your data.

Health Data Sensitivity: We treat all health and biometric data with the highest level of care. This data is never sold, shared with advertisers, or used for any purpose other than providing you with wellness insights within the app.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure authentication via Supabase Auth
• Regular security audits and updates
• Row-level security policies on database tables

7. Data Retention

We retain your data for as long as your account is active. You can request deletion of your account and associated data at any time through the Settings page or by contacting us. Some data may be retained for legal compliance purposes.

8. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data
• Withdraw consent for data processing
• Object to certain types of processing

To exercise these rights, contact us at support@tradeworkstation.com.

9. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand how users interact with our service. You can control cookie preferences through your browser settings.

10. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the app. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: