Legal

Privacy Policy

Your trades and your trust both matter to us. This policy explains what data we collect, why, how we protect it, and the choices you have.

Last updated: June 7, 2026 Effective date: June 7, 2026 Version: 1.1
i
The short version. We collect only what we need to run Tradevada — your account info, the trades you connect, basic first-party diagnostic logs, and payment data via Stripe. We don't sell your data, we don't share your trades with third parties for marketing, and you can export or delete everything from your account at any time.

01 Introduction

This Privacy Policy describes how Tradevada, LLC ("Tradevada," "we," "us," or "our") collects, uses, and shares personal information when you use our website, mobile or desktop applications, APIs, and related services (collectively, the "Service").

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service. This Policy is incorporated into our Terms of Service.

02 Information We Collect

We collect the following categories of information:

Account information
Name, email, password (hashed), profile photo, time zone, and account preferences.
Trade data
Trade history imported from your connected brokerage(s) — including symbols, fills, prices, quantities, strategy tags, P&L, and your own notes and journal entries.
Brokerage credentials
Read-only API tokens or OAuth grants you provide to authorize Tradevada to import data from your broker. We never request your broker password unless explicitly required by an integration, and we never use credentials to place trades.
Payment information
Billing address, the last 4 digits of your card, card brand, and expiration date. We do not store your full card number — payments are processed by Stripe, Inc.
Usage data
IP address, request timestamps, basic device and browser information your browser sends, and first-party diagnostic and security logs (for example, sign-in and broker-connection events). We do not use third-party analytics or cross-site trackers.
Cookies & identifiers
Small text files and local storage on your device used for authentication and to remember your preferences (see Section 8).
Communications
Messages you send to support, survey responses, and feedback you submit.

03 How We Use Your Data

We use your information to:

  • provide, maintain, secure, and improve the Service;
  • create and authenticate your account;
  • import, process, and display your trade history and analytics;
  • process subscription payments and prevent fraud;
  • send transactional emails (account confirmations, billing receipts, security alerts);
  • respond to support requests and feedback;
  • send product updates or occasional marketing emails if you have opted in, with an unsubscribe link in every such email;
  • monitor performance, debug issues, and prevent abuse;
  • comply with legal obligations and enforce our Terms.

We do not sell your personal data. We do not share your trade data with third parties for advertising or marketing purposes, and we do not use your trade data to train third-party machine-learning models without your explicit consent.

05 How We Share Information

We share information only as described below:

  • Service providers (sub-processors). Vendors that help us operate the Service — including Cloudflare (hosting, content delivery, and network security), Stripe (payment processing), Resend (transactional email delivery), SnapTrade and Alpaca (broker connectivity and market data, at your direction), and Microsoft 365 (support email). Each is bound by contract to use your data only to provide services to us.
  • Brokerage and data partners. When you connect a broker, the broker shares your trade data with us at your direction. We do not share your trades back with brokers or other data partners.
  • Legal & compliance. We may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of Tradevada, our users, or the public.
  • Business transfers. If Tradevada is acquired or merged, your information may transfer as part of that transaction. We will notify you and provide choices if your information becomes subject to a materially different privacy policy.
  • With your consent. Any other sharing will only happen with your explicit consent.

06 Broker Connections

When you connect a brokerage account, we receive trade and account data only as authorized by you and the broker. We use this data exclusively to populate your Tradevada journal and analytics. We request read-only access whenever the broker permits it, and we never use connections to place trades on your behalf.

You can disconnect a broker at any time from your account settings. After disconnection, we will stop importing new data, but data already imported will remain in your journal until you delete it or your account.

Administrators may receive operational notifications about platform events — including new account creation, brokerage connection events (account count only, not contents), billing events, and system health alerts — for the purpose of operating, supporting, and securing the Service. Administrators do not receive notifications containing your positions, trades, or financial performance.

07 Payment Information

All payments are processed by Stripe, Inc. We never receive or store your full payment card number, CVC, or full bank account number. Stripe handles your payment data in accordance with its own privacy policy and PCI-DSS compliance program.

We retain limited billing information (last 4 digits, card brand, expiration, billing address) to display your payment method, send receipts, and prevent fraud.

08 Cookies & Tracking Technologies

We use cookies and similar technologies for the following purposes:

  • Strictly necessary — to authenticate your session, remember your preferences, and protect against CSRF attacks. These cannot be disabled.
  • Functional — to remember UI choices like your selected accent color, dark/light mode, or default account.
  • Diagnostic & security — first-party logs that help us keep the Service reliable and secure (for example, detecting failed logins or broken broker connections). We do not use third-party analytics, advertising cookies, or cross-site trackers.

You can control cookies through your browser settings; blocking strictly necessary cookies may break sign-in and other core features.

09 Data Retention

We keep your personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

  • Account & trade data — retained for the lifetime of your account; deleted within 30 days of account deletion (subject to legal hold).
  • Billing records — retained for 7 years for tax and accounting compliance.
  • Logs & security events — retained for up to 90 days.
  • Backups — encrypted backups may persist for up to 90 days after deletion.

10 Your Rights & Choices

You have the following rights with respect to your personal information:

  • Access — request a copy of the personal data we hold about you;
  • Correction — update inaccurate or incomplete information;
  • Deletion — request that we delete your account and personal data;
  • Export — request a copy of your trade history and account data in a portable format by contacting support;
  • Restriction & objection — restrict or object to certain processing activities;
  • Marketing opt-out — unsubscribe from marketing emails at any time using the link in each email.

To exercise these rights, email support@tradevada.com. We will respond within the time required by applicable law (typically 30 days). We will not discriminate against you for exercising these rights.

11 California Residents (CCPA / CPRA)

If you are a California resident, you have the rights described in Section 10, plus the right to know what categories of personal information we collect, sell, or share. We do not sell or share personal information for cross-context behavioral advertising as defined under the CCPA/CPRA.

To exercise your rights, contact support@tradevada.com. You may also designate an authorized agent to make a request on your behalf, subject to identity verification.

12 EEA, UK & Swiss Residents

If you are in the EEA, the UK, or Switzerland, you have additional rights under the GDPR, UK GDPR, or FADP, including the right to lodge a complaint with your local supervisory authority. We will cooperate with any investigation.

Our designated representative for GDPR matters can be contacted at support@tradevada.com.

13 Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your data, including:

  • encryption in transit (TLS) for all traffic, and encryption at rest for sensitive credentials such as broker tokens and notification keys;
  • hashed and salted password storage (bcrypt, work factor 12);
  • row-level data isolation between accounts, role-based access control, and audit logging;
  • least-privilege access provisioning for internal systems;
  • incident-response procedures with user notification where required by law.

No system can be 100% secure. If we learn of a security breach affecting your personal information, we will notify you and the appropriate authorities as required by law.

14 International Data Transfers

Tradevada is operated from Texas, United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. and other jurisdictions where our service providers operate. Where required, we use Standard Contractual Clauses or other lawful transfer mechanisms to protect your data.

15 Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, please contact support@tradevada.com and we will delete it promptly.

16 Third-Party Links

The Service may contain links to third-party websites and services (such as broker login pages, news sources, or payment processors). This Privacy Policy does not cover those third parties' privacy practices. We encourage you to review their privacy policies before providing them with information.

17 Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the Service before the changes take effect. The "Last updated" date at the top reflects when the policy was most recently changed.

18 Contact & Data Protection Officer

Questions, requests, or complaints about your privacy? Get in touch:

Tradevada, LLC · Texas, USA