Privacy Policy
Last updated: May 19, 2026
This Privacy Policy explains how the operator publishing under the name TradeWise ("we", "us", "our"), based in Rome, Italy, collects, uses, and protects your personal data when you use the TradeWise platform, website, and application (the "Service"). We process personal data in accordance with the EU General Data Protection Regulation 2016/679 ("GDPR") and the Italian Data Protection Code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018).
1. Data Controller
The data controller is the operator of TradeWise, based in Rome, Italy. Full controller identification details will be completed before commercial launch.
For any privacy-related request, contact us at: tradewise75@gmail.com
A formal Data Protection Officer (DPO) is not mandatory for most small operators, but is recommended if large-scale or sensitive processing is undertaken. Reassess as the Service grows.
2. Personal Data We Collect
Account & identity data
- Email address
- Name / display name
- Password (stored only in hashed form by our authentication provider)
- City and time zone (provided by you to personalize the Service)
Preferences
- Tracked symbols and instruments you choose to follow
- Preferred billing currency
- Notification, theme, and other settings
Trading journal content (provided by you)
- Trade entries (symbol, direction, levels, position size, dates)
- Notes, recorded emotions, mistakes, strategies
- Screenshots you upload
Subscription & billing data
- Subscription status, plan, start/end dates
- Billing identifiers from our payment processor (we do not store full card numbers)
Technical & usage data
- Log data, device/browser information, IP address
- Usage events necessary to operate and secure the Service
3. How and Why We Use Your Data (Purposes and Legal Bases)
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Create and manage your account, provide the Service | Performance of a contract |
| Process subscriptions, trial, billing | Performance of a contract |
| Personalize dashboard/content (tracked symbols, time zone) | Performance of a contract / your consent where applicable |
| Generate AI market briefings and behavioral insights from your data | Performance of a contract |
| Security, fraud prevention, debugging | Legitimate interests |
| Service improvement and analytics | Legitimate interests (or consent where required) |
| Send service and transactional communications | Performance of a contract |
| Send marketing communications (if any) | Your consent (withdrawable at any time) |
| Comply with legal, tax, and accounting obligations | Legal obligation |
We do not use the Service to provide financial advice; trading-related content is processed only to deliver the educational/analytical features you request.
4. AI Processing
4.1. To generate market context and behavioral insights, certain data (e.g. aggregated market data and elements of your trading journal) is processed by AI/LLM providers acting as our processors.
4.2. We instruct providers to process such data only to deliver the feature requested and not for unrelated purposes. We minimize the personal data sent for AI processing wherever feasible.
5. Sharing and Processors
We do not sell your personal data. We share data only with service providers ("processors") strictly to operate the Service, including:
- Hosting / deployment —StackBlitz Inc. (Bolt Cloud)
- Database & authentication —Supabase
- Payment processing —Stripe
- Market data / financial news APIs —e.g. Finnhub, Alpha Vantage (these generally receive market queries, not your identity)
- AI processing provider(s) —for market briefings and insights
- Email delivery —[to be specified if/when a transactional email provider is used]
Each processor is bound by a data processing agreement and may only act on our documented instructions.
6. International Transfers
Some processors may be located outside the European Economic Area. Where this occurs, transfers are protected by appropriate safeguards (e.g. European Commission Standard Contractual Clauses or an adequacy decision). You may request information about these safeguards at tradewise75@gmail.com.
7. Data Retention
- Account data —retained while your account is active, then deleted or anonymized within a reasonable period after closure.
- Trading journal content —retained while your account is active; deleted on account closure (subject to backups expiring on a rolling basis).
- Billing/accounting records —retained for the legally required period under Italian tax/accounting law (generally up to 10 years).
- Technical logs —retained for a limited period for security and debugging.
8. Your Rights
Under the GDPR, you have the right to:
- access your personal data;
- rectify inaccurate data;
- erase your data ("right to be forgotten");
- restrict or object to certain processing;
- data portability;
- withdraw consent at any time (without affecting prior lawful processing);
- lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
To exercise your rights, contact tradewise75@gmail.com. We will respond within the timeframe required by law (generally one month).
9. Cookies and Similar Technologies
9.1. We use strictly necessary cookies/local storage to operate the Service (e.g. authentication/session).
9.2. Any non-essential cookies (e.g. analytics) are used only with your consent, collected via a cookie banner in accordance with the Garante's cookie guidelines (Linee guida cookie). You can change your choices at any time.
9.3. A detailed cookie notice is made available within the Service.
10. Security
We implement reasonable technical and organizational measures (encryption in transit, hashed passwords, access controls, row-level security on user data) to protect personal data. No method of transmission or storage is fully secure; we cannot guarantee absolute security. In the event of a personal data breach likely to result in a risk to your rights, we will notify the Garante and, where required, you, in accordance with the GDPR.
11. Children
The Service is not directed to persons under 18. We do not knowingly collect data from minors. If you believe a minor has provided data, contact us so we can delete it.
12. Changes to This Policy
We may update this Policy. Material changes will be notified by reasonable means. The "Last updated" date reflects the latest version.
13. Contact
For any question regarding this Policy or your personal data: tradewise75@gmail.com