Effective date: June 11, 2026 Last updated: June 11, 2026
This Privacy Policy explains how TraderLeveling — currently operated by its founder as a sole proprietorship doing business as "TraderLeveling" — ("TraderLeveling," "we," "us") collects, uses, shares, and protects information when you use the TraderLeveling application and website at traderleveling.com (the "Service"). It applies to all users of the Service. Capitalized terms not defined here have the meanings in our Terms of Service.
Plain-language summary: We collect your account information and the trading content you create — trades, journal entries, methodology descriptions, chart annotations, and explanations. AI features send relevant portions of that content to our AI provider (Anthropic) under commercial terms that prohibit training on it. Your methodology is yours; we don't sell it, show it to other users, or sell your personal information to anyone. If you connect a brokerage account, we read your fills to automate your journal; if you stream your own live market data through the Service, we process it ephemerally and never store it. You can export your records and delete your account and data at any time.
The core of the Service:
If you connect a brokerage, platform, or data account (e.g., via OAuth):
You can disconnect any linked account at any time in settings, which revokes our access.
Payments are processed by Stripe. We do not receive or store full card numbers. We receive limited billing details (name, billing email, card brand and last four digits, transaction and subscription status).
If you contact us, we keep the correspondence and your contact details.
We do not collect government identifiers, precise geolocation, biometric data, or data from data brokers. Market data displayed to you (price/quote information) is not information *about you* and is not treated as your personal information, though your access to it is logged per Section 1.5.
We use information to:
We do not: sell or rent your personal information; sell, share, or expose your methodology, trades, or journal content to other traders, firms, or data buyers; use one user's content to provide coaching, insights, or signals to any other user; or use your content to train AI models.
Legal bases (where required, e.g., GDPR): performance of our contract with you (core Service), legitimate interests (security, abuse prevention, service improvement), consent (where specifically requested), and legal obligation (tax, accounting, lawful requests).
AI features are powered by third-party large language model providers, currently Anthropic (Claude models), accessed via API.
We share personal information only as described here.
Service providers (subprocessors), under contracts limiting their use of data to providing services to us:
| Subprocessor | Purpose | Data involved |
|---|---|---|
| Render | Application and database hosting | All Service data |
| Anthropic | AI model processing | User Content sent for AI features |
| Resend | Transactional email delivery | Email address, email content |
| Stripe (when paid plans launch) | Payment processing | Billing information |
*(No voice-transcription subprocessor is currently in use; one will be added to this table before any voice feature ships.)*
Data sources (not subprocessors): we license market data from providers such as Databento. Market data flows *to* the Service; we do not send your personal information to data providers, other than technical access information inherent in API use.
Legal and safety: we may disclose information to comply with law, regulation, legal process, or enforceable governmental request; to enforce our Terms; or to protect the rights, safety, or property of TraderLeveling, our users, or the public.
Business transfers: in a merger, acquisition, financing, or sale of assets, information may be transferred as part of the transaction; this policy will continue to apply, and we will notify you of any material change in ownership or use of your personal information.
With your direction: when you export your data or direct us to share it.
We do not sell personal information and have not done so. We do not "share" personal information for cross-context behavioral advertising.
Your trading methodology and the content you create remain yours, including AI-derived artifacts compiled from it (see Terms of Service §6). We hold only the limited license needed to operate the Service for you. We do not use one user's methodology to benefit another user, and aggregated/de-identified improvement data is constructed so that it cannot reveal your methodology.
| Data | Retention |
|---|---|
| Account information | While your account is active |
| User Content (trades, journals, methodology, annotations, derived artifacts) | While your account is active, or until you delete the specific content |
| Live market data from your connections | Not stored (ephemeral, per-session) |
| Derived analytical events | While your account is active, or until deleted |
| Market data access logs (audit) | Up to 24 months (compliance/audit) |
| AI usage/cost records | Up to 24 months (billing/abuse prevention) |
| Payment records | As required by tax and accounting law (typically 7 years) |
| Support correspondence | Up to 24 months after resolution |
When you delete your account, we delete your personal information and User Content within 30 days, except where retention is required for legal, security, audit, or accounting purposes. Deleted data may persist in encrypted backups for up to 90 days before purging on normal rotation; backup copies are not restored to production except for disaster recovery.
We use technical and organizational measures appropriate to the data we handle, including: TLS encryption in transit; database-level tenant isolation (PostgreSQL row-level security with fail-closed policies); hashed passwords; signed, expiring tokens for email verification and password reset; per-IP credential rate limiting and per-user usage rate limiting; environment-enforced production secrets; and audit logging of market data access.
No system is perfectly secure, and we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you and applicable regulators as required by law, without undue delay.
You can: update account information in settings; delete trades, journal entries, methodology content, and annotations directly in the app; export your trades and journal records using the export tools; disconnect linked broker/data accounts at any time; and delete your account entirely.
You have the right to: know/access the categories and specific pieces of personal information we collect, the sources, purposes, and categories of third parties to whom it is disclosed; delete personal information, subject to legal exceptions; correct inaccurate personal information; portability of your data; and non-discrimination for exercising rights.
Categories we collect (per Cal. Civ. Code §1798.140): identifiers (name, email, IP); commercial information (subscription records; your trading records as content you provide); internet/electronic activity (usage logs); audio (voice explanations, if you record them); and inferences only insofar as analytical outputs are derived from your own content at your direction.
We do not sell personal information and do not share it for cross-context behavioral advertising, so there is no sale/sharing to opt out of; we honor Global Privacy Control signals where applicable. We do not use or disclose sensitive personal information for purposes requiring a right to limit.
To exercise rights, email privacy@traderleveling.com from your account email. (We operate exclusively online with a direct relationship with our users, so email is our designated request method.) We will verify your identity via your account and respond within the time required by law (generally 45 days). You may use an authorized agent with written permission.
You may have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. The legal bases in Section 2 apply. The Service is operated from the United States (Section 9).
The Service is operated from the United States, and information is processed and stored in the U.S., which may have different data protection laws than your jurisdiction. By using the Service, you understand your information will be transferred to and processed in the U.S.
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us at privacy@traderleveling.com and we will delete it.
We honor Global Privacy Control signals for applicable rights. Because we do not track users across third-party sites, browser Do Not Track signals do not change our practices.
We may update this policy. Material changes will be announced via the Service or by email at least 14 days before they take effect. The "Last updated" date reflects the current version. Prior versions are available on request.
TraderLeveling privacy@traderleveling.com (We operate exclusively online; a mailing address is available upon written request.)