Privacy Policy

1. Data we collect

Account data: email, password (stored only as a secure hash), name, last name and the optional profile details you add (nickname, photo, phone, recovery email, bio, brokers, social links, trading experience and goals).

Trading data: trades, deposits and withdrawals synced from MetaTrader 5 or imported by you, account names and balances, and the market candles your connector or files send.

Content you create: journal notes, images and files, tags, habits, backtests, portfolios and accounting entries.

Technical data: IP address, browser and device information and server logs needed to run and secure the Service.

Payment data: handled by our payment provider. We receive your plan and subscription status, never your full card number.

2. Why we use it

To provide the Service and your journal (contract); to secure accounts and prevent abuse (legitimate interest); to send essential emails such as password resets and billing notices (contract); to meet legal and tax obligations (legal obligation); and, only if you agree, to send product news (consent). We do not sell your personal data and we do not use it for advertising.

3. Who processes it

We use trusted providers that process data on our behalf: Vercel (hosting and file storage), Neon (database), Resend (transactional email) and our payment provider (payments and invoices). Market-data providers you connect receive only the requests made with your own API keys. Data may be processed outside your country, including in the United States, with appropriate safeguards.

4. Cookies

Necessary cookies keep the Service working and never need consent: your session (nt_session), language (lang), theme (theme), selected trading account (account), time zone (tz) and your cookie choice (nt_consent, kept 6 months).

Analytics and marketing cookies are optional and only load if you accept them in the cookie banner. You can accept, reject or change your choice anytime from "Cookie settings" at the bottom of every page. At the moment we don't use any analytics or marketing cookies; if we add them, they'll stay off until you allow them and we'll list them here.

5. Public sharing

Notes and trades are private unless you choose to share them. A shared note can be viewed by anyone with its link, together with the author name and social links you allow in your settings. You can stop sharing at any time.

6. How long we keep it

We keep your data while your account is active. If you ask us to delete your account, we delete your data within 30 days, except records we must keep by law (for example invoices) and short-term backups, which are overwritten on a rolling basis.

7. Security

We use encrypted connections (HTTPS), hashed passwords, encrypted API keys and per-user access controls so each account only sees its own data. No system is perfectly secure; we will notify you and the authorities of a breach when the law requires it.

8. Your rights

You can access, correct, update or delete your data, ask for a copy, object to or restrict some uses, and withdraw consent at any time. Write to support@novatradejournal.com; we answer within the time the law sets (in Colombia, 10 business days for queries and 15 for claims). You can also complain to the Superintendencia de Industria y Comercio (Colombia) or your local data-protection authority.

9. Children

The Service is not for people under 18 and we don't knowingly collect their data.

10. Changes

We may update this policy and will tell you about significant changes by email or in the app.

11. Contact

Privacy questions or requests: support@novatradejournal.com.