Short version: we collect what we need to run the platform, we don't sell your data, and you can export or delete it any time. Detailed version below.
01.What we collect
When you use TradeCamp we collect:
- Account info — name, email, password (hashed by Supabase), and optionally a profile photo.
- Course activity — which lessons you've watched, quiz answers, certificates earned.
- Trade journal entries — when you import or enter them. This stays in your account and is private to you.
- Community activity — posts, replies, reactions, reports.
- Payment metadata — purchase history, refund status, and subscription state. We do not store your card; Stripe does.
- Technical data — IP address, browser type, pages viewed, timestamps. Used for analytics, fraud prevention, and to keep the site working.
02.Why we collect it
We use this data to deliver the Service: authenticate you, show you the courses you've purchased, calculate your Summit Score, send you transactional emails about your account, run the community, and improve the platform over time.
We do not sell your personal data. We do not rent it to advertisers. We do not use your private journal entries to train AI models.
03.Who we share it with
We share data only with the third-party services that make the platform work, and only the minimum necessary:
- Supabase — database, authentication, file storage.
- Stripe — payment processing and subscription billing.
- Cloudflare Stream — video hosting and playback for course lessons and live events.
- Resend — sending transactional emails (receipts, password resets, ticket replies).
- Vercel — hosting and content delivery.
- Anthropic — powering the AI chatbot and AI moderation; chat content is processed but not retained for model training under our enterprise terms.
04.Your rights (GDPR / CCPA)
If you're in the EU, UK, California, or another jurisdiction with privacy law, you have the right to:
- Access — request a copy of your personal data we hold.
- Correct — update inaccurate data through your profile settings, or email us.
- Delete — close your account and request deletion of your data. Some records (purchase history, audit logs) may be retained for legal and accounting reasons.
- Export — request a portable copy of your account data in JSON.
- Object — to specific uses of your data such as marketing emails. You can also opt out of marketing email via the unsubscribe link in any marketing message.
- Withdraw consent — for processing based on consent. Withdrawal does not affect prior processing.
05.Data retention
We keep account data as long as your account is active. After you close an account, we retain:
- Anonymized usage analytics indefinitely.
- Purchase and refund records for 7 years for tax and accounting purposes.
- Support tickets for 2 years for service-quality and dispute resolution.
- Community content you posted, attributed to a placeholder username, unless you ask us to remove it specifically.
06.Cookies
We use cookies for two things: keeping you signed in (a Supabase session cookie) and basic analytics. We do not use third-party advertising cookies or cross-site tracking pixels.
You can clear or block cookies in your browser settings. Blocking the session cookie will sign you out and prevent you from using account features.
07.Security
Passwords are hashed; we never see your plaintext password. All connections to the site are encrypted (HTTPS). Customer payment cards are tokenized and stored only by Stripe, never on our servers.
No system is perfectly secure. If we discover a breach affecting your personal data, we'll notify you within the timeframe required by applicable law (72 hours under GDPR).
08.International transfers
Our service providers (Supabase, Stripe, Cloudflare, Vercel, Resend, Anthropic) operate primarily in the United States. If you access TradeCamp from outside the U.S., your data will be transferred to and processed in the U.S. We rely on Standard Contractual Clauses or equivalent safeguards where required.
09.Children's privacy
TradeCamp is not intended for users under 18. We do not knowingly collect personal data from minors. If we discover we've collected such data, we'll delete it. Parents or guardians who believe a minor has created an account should email us.
10.Changes
If we make material changes to this Privacy Policy, we'll update the "Last updated" date at the top and notify affected members by email. Continued use after the effective date means you accept the updated policy.
11.Contact
Privacy questions, data requests, or complaints: email privacy@tradecamp.com or open a support ticket marked "Privacy" in your account. We respond within 30 days.