Privacy Policy

Account information. When you register, we collect your email address and password (stored securely by our authentication provider, Supabase — we never see or store your raw password).

Sign in with Google. If you choose to sign in or register with Google, Google shares your name and email address with us through our authentication provider. We do not receive your Google password, and we do not access your Gmail, Drive, contacts or any other Google data. Signing in with Google is optional.

Support chat. If you use the support chat, we store your messages and the assistant's replies, and your email address if you provide it or are signed in, so we can answer you and improve our help content. Messages are processed by our AI provider (Groq) to generate replies. If you ask for a person, the conversation is sent to our team by email. Please don't put passwords or card numbers in the chat. You can ask us to delete a chat transcript by emailing support@tradercater.com.

Trading data. Trades you log or import — symbol, direction, entry/exit price, profit or loss, timestamps, notes, and any tags you add.

Screenshot uploads. If you use our screenshot-import feature, the image you upload is sent to our AI processing provider to extract trade data. We do not permanently store the raw screenshot after extraction is complete unless you explicitly choose to attach it to a trade.

Onboarding preferences. Optional details you provide such as account type (personal capital, prop firm), instruments traded, preferred currency, and trading goals.

Payment information. If you subscribe to a paid plan, your payment is processed directly by one of our payment processors — Flutterwave, Paddle, or NOWPayments, depending on which you choose at checkout. We do not collect or store your full card number, CVV, bank credentials, or wallet private keys on our servers — we only receive confirmation of payment status and a subscription reference.

Usage & device data. Basic technical data such as browser type, device type, and general usage patterns (e.g. feature usage, session activity) to help us fix bugs and improve the product. Analytics data is collected through Google Analytics only if you accept analytics in our cookie dialog.

• To provide, operate, and maintain your trading journal and analytics
• To extract trade data from screenshots you upload via our AI processing pipeline
• To process subscription payments and manage your plan (Free, Pro, Pro+)
• To send essential account and billing communications (e.g. payment confirmations, renewal notices)
• To detect abuse, enforce usage limits, and keep the platform secure
• To improve TraderCater based on aggregated, non-identifying usage patterns

We do not sell or share (for cross-context advertising) your personal data, and we do not use your trading data to advise, recommend, or make trading decisions on your behalf.

Legal bases (GDPR Art. 6). We process account, trading and payment data to perform our contract with you; we process security, abuse-prevention and essential-service data for our legitimate interests in running a safe service; we keep billing records to meet legal obligations; and we use Google Analytics only on the basis of your consent, which you can withdraw at any time. Providing account and trading data is necessary to use the service; analytics are optional.

We have not appointed a Data Protection Officer. Privacy questions go to the controller at the address in section 11.

We rely on a small number of trusted infrastructure providers to run TraderCater. Each only receives the data necessary to perform its function:

• Supabase — authentication, database hosting, and file storage
• Groq — AI vision processing to extract trade data from screenshots you upload, and to power the AI support chat assistant (the messages you type into the chat)
• Google — optional sign-in with Google (name and email only)
• Vercel — application hosting and delivery
• Google Analytics — website usage analytics, loaded only if you accept analytics
• Flutterwave — payment processing for subscriptions (Nigeria/local cards)
• Paddle — payment processing for subscriptions (international cards; Paddle is the Merchant of Record for these transactions)
• NOWPayments — payment processing for subscriptions (crypto)

These providers are contractually restricted from using your data for any purpose beyond providing their service to us.

Your data is stored on Supabase's managed infrastructure with encryption in transit (HTTPS/TLS) and row-level security policies restricting access so that only you can read or modify your own trades and account data. No system is 100% secure, and we cannot guarantee absolute security, but we take reasonable industry-standard measures to protect your information.

We retain your account and trading data for as long as your account is active. If you delete your account, we permanently remove your personal data and trading history within 30 days, except where we are required to retain limited billing records for legal or tax purposes.

Depending on where you're located (including under Nigeria's NDPR and, where applicable, the EU/UK GDPR), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your trade data (available directly in Settings via CSV/PDF export on paid plans)
• Withdraw consent for optional data processing at any time (use "Cookie Settings" in the footer for analytics)
• Object to or restrict certain processing, and receive your data in a portable format
• Lodge a complaint with a supervisory authority: in Nigeria, the Nigeria Data Protection Commission (NDPC); in the EU/UK, the data protection authority in your country of residence or work

To exercise any of these rights, email support@tradercater.com. We'll respond within 30 days.

Essential cookies/local storage keep you signed in and remember app preferences (e.g. theme, currency, your cookie choice). These do not need consent.

Google Analytics cookies (such as _ga) are set only if you choose "Accept analytics". If you choose "Essential only", analytics scripts are not loaded. You can change your choice at any time with "Cookie Settings" in the footer, and withdrawing is as easy as accepting. We do not use advertising trackers and we do not sell or share personal data for advertising.

TraderCater is not directed at, and not intended for use by, anyone under 18 years old. We do not knowingly collect data from minors. If we learn a minor has created an account, we will delete it.

Our infrastructure providers may process and store data outside Nigeria (e.g. on servers in the EU or US). Where this happens, we rely on providers that maintain appropriate contractual and technical safeguards for cross-border data transfer.

We may update this Privacy Policy as TraderCater evolves. If we make material changes, we'll notify you via email or an in-app notice before they take effect. Continued use of TraderCater after a change means you accept the updated policy.

Questions about this policy or your data? Email us at support@tradercater.com.