1. Introduction
TradePro ("we," "our," "us") operates the trading education platform. This Privacy Policy describes how we collect, use, store, and protect your personal information.
2. Data Controller
Data Controller: TradePro
Contact: support@tradepro.com
3. Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: You have given explicit consent for specific processing activities
- Contract: Processing is necessary to fulfill our Terms of Service
- Legitimate Interest: Processing is necessary for our legitimate business interests
- Legal Obligation: Processing is required by law
4. Data We Collect
4.1 Information You Provide
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Username | Account identification | Contract |
| Email address | Account recovery, communication | Contract |
| Password (hashed) | Account security | Contract |
| Experience level | Personalized content | Legitimate interest |
4.2 Automatically Collected Data
- Usage Data: Pages visited, features used, time spent
- Technical Data: IP address, browser type, device information
- Trading Activity: Simulated trades, portfolio performance (virtual currency only)
- Chat Interactions: Messages sent to AI assistant (for service improvement)
4.3 Data We Do NOT Collect
- ❌ Real financial information (bank accounts, credit cards)
- ❌ Social security numbers or government IDs
- ❌ Precise geolocation data
- ❌ Biometric data
5. How We Use Your Data
5.1 Primary Purposes
- Provide Services: Enable platform features, simulated trading, educational content
- Account Management: Create and maintain your account
- Personalization: Customize content based on experience level
- Communication: Send important updates, notifications
- Security: Prevent fraud, abuse, and unauthorized access
- Improvement: Analyze usage to improve features and content
5.2 AI Processing
Your chat messages are processed by our AI service (Groq API) to provide educational responses. This data:
- Is sent to Groq's servers for processing
- Is NOT used to train AI models
- Is NOT shared with third parties beyond Groq
- Is retained temporarily for service delivery
6. Data Sharing and Third Parties
6.1 Third-Party Services We Use
| Service | Purpose | Data Shared |
|---|---|---|
| Render.com | Hosting infrastructure | All platform data |
| PostgreSQL | Database storage | User accounts, trading data |
| Redis | Caching, performance | Temporary data |
| Groq API | AI chat responses | Chat messages only |
| CoinGecko | Crypto market data | None (public data) |
| Finnhub | Stock market data | None (public data) |
6.2 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
6.3 Legal Disclosures
We may disclose your data if required by law, court order, or to:
- Comply with legal obligations
- Protect our rights and property
- Prevent fraud or abuse
- Protect user safety
7. Data Storage and Security
7.1 Where We Store Data
- Location: United States (Oregon) via Render.com
- Database: PostgreSQL with encrypted connections
- Backup: Automated daily backups
7.2 Security Measures
- ✅ Password hashing (bcrypt)
- ✅ HTTPS encryption for data in transit
- ✅ Database encryption at rest
- ✅ Rate limiting to prevent abuse
- ✅ Input validation and sanitization
- ✅ Regular security updates
7.3 Data Retention
- Active Accounts: Data retained while account is active
- Inactive Accounts: Data deleted after 2 years of inactivity
- Deleted Accounts: Data permanently deleted within 30 days
- Chat Logs: Retained for 90 days for service improvement
8. Your Rights (GDPR & Privacy Laws)
You have the following rights regarding your personal data:
8.1 Right to Access
Request a copy of all personal data we hold about you.
8.2 Right to Rectification
Request correction of inaccurate or incomplete data.
8.3 Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data. We will comply unless we have a legal obligation to retain it.
8.4 Right to Restrict Processing
Request limitation of how we process your data in certain circumstances.
8.5 Right to Data Portability
Request your data in a machine-readable format to transfer to another service.
8.6 Right to Object
Object to processing based on legitimate interests or direct marketing.
8.7 Right to Withdraw Consent
Withdraw consent for processing at any time (where consent is the legal basis).
8.8 How to Exercise Your Rights
Contact us at: support@tradepro.com
We will respond within 30 days (as required by GDPR).
9. Cookies and Tracking
9.1 Cookies We Use
- Essential Cookies: Session management, authentication (required for platform functionality)
- Performance Cookies: Usage analytics to improve the platform
9.2 Third-Party Cookies
We do not use third-party advertising cookies or tracking pixels.
9.3 Managing Cookies
You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.
10. Children's Privacy
TradePro is not intended for users under 18 years old. We do not knowingly collect data from children. If we discover we have collected data from a child, we will delete it immediately.
11. International Data Transfers
Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for international transfers, including:
- Standard contractual clauses
- Adequacy decisions by the EU Commission
- Compliance with GDPR requirements
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in:
- Our practices
- Legal requirements
- Platform features
We will notify you of material changes via:
- Email notification
- Platform banner
- Updated "Last Updated" date
13. Supervisory Authority
If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.
- EU Users: Contact your national Data Protection Authority
- UK Users: Information Commissioner's Office (ICO)
14. Contact Us
For privacy-related questions or to exercise your rights:
- Email: support@tradepro.com
- Response Time: Within 30 days