Privacy Policy
Last updated: January 2025 · Effective date: January 2025
Summary: We collect only what we need to run the service. We never sell your data. You can export or delete everything at any time.
1. Who we are
MRT Trading Journal ("MRT", "we", "us", "our") is a trading journalling platform. Our registered contact is hello@mrtjournal.com.
2. What data we collect
We collect the following categories of personal data:
- Account data: email address, display name, hashed password
- Trade data: trade logs, screenshots, notes, confluences, performance metrics you enter
- Usage data: pages visited, features used, session duration (anonymised analytics)
- Payment data: billing name, last 4 digits of card — full card data is handled by Stripe and never stored by us
- AI interactions: messages sent to the AI Coach — these are sent to Anthropic's API to generate responses and are not stored beyond your session
3. Why we collect it
- To provide the journalling service (trade storage, analytics, calendar)
- To authenticate you and keep your account secure
- To process payments via Stripe
- To send you product updates you've opted in to
- To improve the product using anonymised usage patterns
4. Legal basis (GDPR)
Where GDPR applies, our legal bases are:
- Contract performance — to provide the service you signed up for
- Legitimate interests — anonymised analytics, fraud prevention, security
- Consent — marketing emails (you can unsubscribe anytime)
5. Data sharing
We do not sell, rent or trade your personal data. We share data only with:
- Supabase — database and authentication infrastructure (EU/US servers)
- Stripe — payment processing
- Anthropic — AI Coach queries only (no trade data is stored by Anthropic beyond the API call)
- Vercel — hosting and CDN
- Law enforcement when legally required
6. Data retention
We retain your data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days. Anonymised analytics data (no personal identifiers) may be retained indefinitely.
7. Your rights
You have the right to:
- Access — request a copy of all data we hold about you
- Correction — update inaccurate data at any time in your account settings
- Deletion — delete your account and all data from Settings → Account → Delete Account
- Export — download all your trade data as CSV from Settings → Export
- Portability — receive your data in a machine-readable format
- Object — opt out of marketing communications at any time
To exercise any right, email privacy@mrtjournal.com.
8. Cookies
We use minimal cookies:
- Session cookie — keeps you logged in (essential, cannot be disabled)
- Preference cookies — remembers your settings (can be cleared in browser)
We do not use advertising or tracking cookies from third parties.
9. Security
Your data is encrypted in transit (TLS) and at rest. Passwords are hashed with bcrypt and never stored in plaintext. We conduct regular security reviews. Screenshots are stored in encrypted object storage.
10. Children
MRT is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us immediately.
11. Changes to this policy
We'll notify you by email and in-app if we make material changes to this policy. Continued use after notification constitutes acceptance.
12. Contact
For privacy questions: privacy@mrtjournal.com
For general enquiries: hello@mrtjournal.com