Privacy Policy

Who we are

TradeMai is a trading practice and backtesting tool. You can reach us at support@trademai.com about anything in this policy.

What we collect

When you sign in with Google: your Google account ID, email address, name and profile picture. We keep these in our database as your account, along with when you first signed in, when we last saw you, and when your free trial ends. We ask Google for nothing else, and we never see or store your Google password.

What you create in the app: practice accounts, orders, trades, drawings and the app's own settings. These are kept in your browser as you work, and the same information is saved to our database so it is still there on your next visit and on your other devices. We store it as one document per person and read it back to you; we do not look through it for anything else.

Preferences: the language, the light or dark theme, and the time zone you pick, stored in your browser.

When you write to support in the app: the messages you send and the replies we send back, kept with your account so the conversation is still there next time.

If you subscribe: our payment provider's customer and subscription references, whether the subscription is active, when the paid period ends, and whether it is set to stop. Your card details go to the payment provider, never to us.

Server logs: when you load a page or the app asks for market data, our servers record the request, the time, your IP address and your browser's user agent. These logs exist to keep the service running and safe, and are kept for a short period.

Why we use it

To sign you in and keep you signed in.

To show your practice accounts and trades back to you.

To keep the service available, investigate faults and prevent abuse.

To answer you when you write to us.

We do not sell your data, and we do not use it to profile or advertise to you.

Cookies

We use a small number of cookies and browser storage entries, all necessary for the site to work:

rl_session — proves you are signed in. It is signed, HttpOnly, and lasts 30 days or until you sign out.

rl_oauth — a short-lived cookie during the Google sign-in itself. It lasts ten minutes.

Browser storage — your theme, time zone and a copy of your practice data, so the app works while you are offline.

We do not use advertising cookies. If we ever add analytics that need consent, we will ask first.

Who else is involved

Google handles the sign-in. Your use of a Google account is governed by Google's own privacy policy.

Vercel hosts the website and processes the requests to it.

Neon runs the database that holds your account, your practice data and your support messages.

Stripe takes the payments. If you subscribe, Stripe holds your name, email and card details; we receive only the references and the status described above.

DigitalOcean hosts the server that stores market data and answers the app's requests.

Dukascopy is the source of the historical market data. We fetch published price history from them; they receive nothing about you.

These providers process data on our behalf so the service can run. We do not share your information with anyone else unless the law requires it.

Where your data is

The website runs on Vercel's global network. The database is hosted by Neon. The market data server is in Singapore. Your Google profile is also in the signed cookie in your browser, and in server logs as described above.

How long we keep it

Your account, your practice data and your support messages are kept for as long as you have an account, because they are the service: your work has to still be there when you come back. Nothing of yours is deleted on a timer.

When you delete your account — from the settings in the app, or by writing to us — the account row goes, and your practice data, subscription record and support messages go with it. This is immediate and cannot be undone. If you have a subscription we stop it at the same time, so no further charge is made.

The session cookie expires after 30 days, or immediately when you sign out.

Server logs are kept for a short period for security and troubleshooting, then deleted.

The copy in your browser stays until you clear your browser data.

Records of payments are kept by Stripe under their own terms, and we keep the fact that a payment happened for as long as the law requires us to account for it.

Your choices

Sign out at any time from the menu in the app or the header on the site; that removes the session cookie.

Clear your browser data to remove the preferences and practice data stored there.

Write to support@trademai.com to ask what we hold about you, to correct it, or to have it deleted. We will answer within 30 days.

You can also remove our access from your Google account at any time, in your Google account's security settings.

Children

The service is not intended for anyone under 18, and we do not knowingly collect their data.

Changes

If this policy changes, the date at the top changes with it. If the change is significant, we will say so on the site.

Language

This policy is published in several languages; the English version is the authoritative one and governs if a translation differs from it.