Privacy Policy

1. Who we are

TradingRx (tradingrx.net) is a trading-journal and behavior-analytics web application. This policy explains what personal data we collect, why, and how you can control it. Data controller contact: admin@tradingrx.net.

2. Data we collect

• Account data — when you sign in with Google we receive your name, email address, and profile picture. We do not receive your Google password.
• Trading data — MetaTrader statements you upload and the closed-trade history derived from them (symbols, volumes, prices, profits, timestamps), plus trading plans and journal notes you create in the app.
• Broker connection credentials — if you enable automatic sync, we store your account number, server name, and read-only investor password. The investor password is encrypted at rest with AES-256-GCM and cannot place trades or withdraw funds by design.
• Integration data — if you link the RX-Aegis companion tool or the Telegram bot, we store the technical identifiers needed for that link (device identifier, Telegram chat ID).
• Payment data — payments are processed by Lemon Squeezy or PayOS. We receive only the order status, plan, and amount; card and bank details never reach our servers.
• Technical data — standard server logs (IP address, browser type, timestamps) used for security and debugging.

3. How we use your data

• to operate the Service: parse statements, compute health scores and behavior diagnostics, and display your dashboards;
• to run automatic history sync you have explicitly configured;
• to manage your subscription and send service-related messages;
• to secure, debug, and improve the Service.

We do not sell your personal data, do not share your trading data with other users, and do not use it for third-party advertising.

4. Service providers

We share data only with the processors required to run the Service:

• Google (authentication);
• Lemon Squeezy and PayOS (payment processing);
• our cloud hosting and database providers (infrastructure located in the Asia-Pacific region);
• Telegram (only if you link the Telegram bot).

5. Security

All traffic is encrypted in transit with TLS. Stored broker credentials are encrypted with AES-256-GCM using keys held outside the database. Internal sync traffic is authenticated with signed requests. No method of storage is 100% secure, but we design the Service so that the most sensitive credential we ever hold is read-only.

6. Retention and deletion

Your data is kept while your account is active. You can delete uploaded statements and broker connections in the app at any time. To delete your entire account and its data, email admin@tradingrx.net from your registered address; we complete deletion within 30 days, except records we must keep for legal or accounting reasons.

7. Cookies

We use only the cookies required to keep you signed in (session cookies set by our authentication system). We do not use third-party advertising or cross-site tracking cookies.

8. Your rights

You may request access to, correction of, export of, or deletion of your personal data at any time by contacting admin@tradingrx.net. If you are in a jurisdiction with specific data-protection rights (such as the GDPR), we honor those rights accordingly.

9. Children

The Service is not directed at, and may not be used by, anyone under 18 years of age.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app or by email before they take effect. See also our Terms of Service.