Introduction
Welcome to Zentradix ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our trading journal service.
Data Controller
The data controller responsible for your personal data is:
Zentradix
Contact: support@zentradix.com
What Data We Collect
We collect the following types of information:
Account Data
- Email address (required for account creation and login)
- Display name (optional, for personalization)
- Account preferences (theme, timezone, notification settings)
- Unique user identifier (generated automatically)
Trading Data
- Trade records (entry/exit prices, symbols, position sizes, profit/loss)
- Journal entries (notes, emotions, discipline scores, strategies)
- Trading account details (account names, balance tracking)
- Performance analytics (win rates, expectancy, behavior patterns)
- Uploaded screenshots and trade-related files
Billing Information
- Customer and subscription identifiers (provided by Paddle, our payment processor)
- We do NOT store payment card details — all payment processing is handled by Paddle.com
Technical Data
- Browser type and version
- Device information (type, operating system)
- IP address and approximate location (for security and fraud prevention)
- Session information and authentication tokens
Support Communications
- Messages sent via support forms or email
- Your name and email address when contacting support
Why We Collect This Data
We use your data for the following purposes:
- Service Provision: To create and manage your account, store your trading data, and provide journal features
- Billing & Payments: To process subscriptions, manage billing, and send invoices/receipts via Paddle
- Customer Support: To respond to your questions, troubleshoot issues, and provide assistance
- Product Improvement: To analyze usage patterns and improve our features (aggregated and anonymized data only)
- Security: To prevent fraud, unauthorized access, and ensure platform integrity
- Legal Compliance: To comply with applicable laws, regulations, and legal obligations
Legal Basis for Processing
We process your personal data under the following legal grounds:
- Contract: Processing is necessary to provide the trading journal service you've subscribed to
- Legitimate Interests: We process data to improve our service, prevent fraud, and ensure security
- Consent: For non-essential cookies and marketing communications (where applicable)
- Legal Obligation: To comply with tax, accounting, and regulatory requirements
Data Sharing & Third-Party Processors
We share your data with trusted third-party service providers who help us operate our platform:
Supabase (Database & Authentication)
- Purpose: Database hosting, user authentication, secure data storage
- Data shared: Email, user ID, trading data, journal entries
- Location: US-based servers (Supabase complies with SOC 2 Type II and GDPR)
Netlify (Hosting & CDN)
- Purpose: Web hosting, content delivery, form submissions (if used)
- Data shared: IP address, browser information, page requests
- Location: US-based infrastructure
Paddle (Payment Processing - Merchant of Record)
- Purpose: Payment processing, subscription management, invoices, tax/VAT compliance
- Data shared: Email, billing information, subscription status
- Location: UK/EU and US (Paddle is GDPR-compliant and PCI DSS certified)
- Note: Paddle acts as the Merchant of Record and handles all payment card data. We never see or store your card details.
We do NOT sell your data to third parties.
International Data Transfers
Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. We ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) with data processors
- Adequacy decisions by the European Commission (where applicable)
- Compliance with GDPR and other data protection laws
Data Retention
We retain your data for as long as necessary to provide our services and comply with legal obligations:
- Account & Trading Data: Retained while your account is active. Deleted within 90 days after account deletion (unless required by law)
- Billing Records: Retained for 7 years to comply with tax and accounting regulations
- Support Communications: Retained for 3 years for customer service quality and dispute resolution
You can request deletion of your data at any time (see "Your Rights" below).
Your Rights
Under data protection laws (including GDPR and CCPA), you have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your data ("right to be forgotten")
- Data Portability: Receive your data in a machine-readable format (CSV)
- Objection: Object to processing based on legitimate interests
- Restriction: Request restriction of processing in certain circumstances
- Withdraw Consent: Withdraw consent for marketing or analytics cookies
To exercise these rights, contact us at support@zentradix.com. We will respond within 30 days.
Data Security
We implement industry-standard security measures to protect your data:
- Encryption in transit (TLS/SSL) and at rest
- Secure authentication (bcrypt password hashing, OAuth)
- Regular security audits and monitoring
- Access controls and role-based permissions
However, no method of transmission or storage is 100% secure. If you suspect unauthorized access to your account, please contact us immediately at support@zentradix.com.
Cookies
We use essential cookies to enable core functionality (authentication, session management, preferences). For details on analytics/marketing cookies, see our Cookie Policy.
Children's Privacy
Our service is not intended for individuals under 18 years of age. We do not knowingly collect data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on our platform. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us:
Email: support@zentradix.com
Company: Zentradix