Privacy Policy

Information we handle

• Account information: name, username, email address, password hash, verification state, role, and login timestamps.
• Trading information: trades, accounts, instruments, strategies, pending plans, journal entries, reviews, psychology and checklist evidence, tags, and performance records you create or import.
• Files and evidence: screenshots, chart evidence, captions, file metadata, and generated Auto Chart files where available.
• Import and connection metadata: import files, processing results, source/platform identifiers, and supported broker-connection status. Development previews and unavailable integrations are not represented as production connections.
• Subscription metadata: selected plan, billing interval, Stripe customer/subscription references, provider-confirmed status, trial dates, cancellation state, and payment readiness. TradersMill does not collect or store payment-card numbers; Stripe handles card details through its hosted payment flow.
• Security and technical data: session cookies, remember-me cookies when selected, request/security events, error logs, configuration-safe diagnostics, IP-related abuse-throttle data held as short-lived digests, and device/browser information normally supplied with web requests.
• Support communications: messages and diagnostic information you choose to provide when requesting help.

How information is used

We use information to authenticate customers; provide owner-scoped journals, analysis, imports, screenshots, subscriptions, and support; prevent abuse; troubleshoot failures; preserve records; reconcile Stripe events; communicate account-security messages; and meet applicable legal obligations. TradersMill does not use Veronica or other review outputs to predict markets or provide individualized investment advice.

Service providers

Information may be processed by providers needed to host the application and database, store private files, deliver email, collect protected logs, and process subscriptions. Stripe receives payment and billing information according to its own terms and privacy practices. We do not claim that every possible provider is already selected or connected.

Cookies and sessions

TradersMill uses essential session cookies for sign-in, security, CSRF protection, and account continuity. A longer-lived remember cookie is used only when selected. Production cookies are configured as Secure and HttpOnly with a SameSite policy. The current product does not describe advertising cookies.

Retention

Account and trading records are generally retained while an account remains active and as reasonably needed to provide the service, maintain security and billing records, resolve disputes, and meet applicable obligations. Backups may retain data for a limited operational period after deletion. Final retention schedules require owner and legal review; this policy does not promise an unsupported deletion deadline.

Security

TradersMill uses password hashing, signed expiring account links, owner-scoped access, secure production cookies, CSRF controls, private authenticated file routes, Stripe webhook verification, production startup validation, and logging redaction. No system can guarantee absolute security.

Your choices and requests

You may request access to, correction of, or deletion of account information through Support. Requests are subject to identity verification, supported product workflows, backup cycles, fraud/security preservation, contractual records, and applicable law. You may cancel a subscription separately under the cancellation policy.

Updates and contact

Material policy changes will be published here with a revised effective date. Privacy questions and requests may be submitted through Support or support@tradersmill.com.