Privacy notice

TradingScope is the controller for the processing described here. For any privacy question or request, including the rights listed below, contact privacy@tradingscope.app. We will also give you our full registered details on request.

When you submit an early-access application we collect your email address, your first name if you choose to give one, the plan you selected, your answers to the eight product-research questions, the version of this notice shown to you, and limited campaign attribution (UTM parameters, the referring site's domain, and the path you landed on). We do not store your IP address with the application, and we do not store the full referring URL or any query string.

The purpose is to manage the early-access list and to understand what to build. The legal basis is our legitimate interest in assessing demand and contacting people who asked to be contacted, together with the authorisation you give when you submit the form. Answering the questions is voluntary and the answers are used for product research and access qualification, not to give you a personal recommendation.

An application does not create an account, does not start a subscription, and takes no payment.

If you tick the newsletter box, on the application form or on the newsletter page, we use your email address, and your first name if given, to send the TradingScope briefing and product updates. The legal basis is your consent. You can withdraw it at any time using the unsubscribe link in any message, or by emailing us; withdrawing does not affect messages already sent, and it does not withdraw your application.

If you hold a TradingScope account, we process your account email, profile details and the data you create in the product, including watchlists, journal entries, settings and analysis history, in order to provide the service to you. The legal basis is performance of our agreement with you.

We use Google Analytics 4 only after you accept analytics cookies in the consent banner. Until you accept, analytics storage is denied and no analytics cookie is set. The legal basis is your consent, which you can change or withdraw at any time from the banner.

Analytics events never include your name, your email address, your questionnaire answers, your referring URL or the page query string. Your consent choice itself is not a cookie: it is remembered in your browser's local storage on your own device, and clearing site data removes it. Cookies that are strictly necessary to keep you signed in are always set, because the site cannot function without them. You can reopen or withdraw the choice at any time with “Cookie settings” in the footer; withdrawing reloads the page so the analytics tag stops immediately.

To stop automated abuse of the public forms, we record a one-way salted hash of your IP address and of your email address, together with a short-lived counter. The plain IP address is never stored, and the hashes cannot be reversed back to it. The legal basis is our legitimate interest in keeping the service available and free of spam. These records expire automatically within 48 hours.

We rely on a small number of processors acting on our instructions: Supabase for database and serverless hosting, Vercel for website hosting, Google for analytics once you consent, and our email delivery provider for the newsletter. Some of these providers may process data outside the EEA; where they do, transfers are covered by the European Commission's standard contractual clauses or an adequacy decision. We do not sell your personal data and we do not share it for third-party advertising.

Early-access applications are deleted, or irreversibly anonymised, no later than 12 months after your last meaningful contact with us about the application, and, until we track that contact, 12 months after you submitted it. A scheduled job in our database enforces this; it is not a promise we keep by hand. You can ask us to erase an application sooner. Newsletter records are kept until you unsubscribe, plus a short period to honour the unsubscribe. Account data is kept for as long as the account exists and is deleted, or anonymised, after closure. Abuse-protection hashes expire within 48 hours and the same scheduled job removes them. Analytics data follows the retention period configured in Google Analytics.

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting processing already carried out. To exercise any of these rights, email privacy@tradingscope.app.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have handled your data unlawfully.

We do not make decisions producing legal or similarly significant effects about you by automated means, and we do not profile you to give personal investment recommendations. Analysis assisted by AI in the product describes markets, not you.

If we change what we do with personal data, we will publish an updated notice with a new version number here. The version shown at the top is the current one; the version in force when you applied is stored with your application.