Privacy Policy

1. Information you give us

• Account details: your name, email address and password. Passwords are stored only as a one-way hash, never in readable form.
• If you turn on two-factor authentication: the secret key your authenticator app shares with us, stored encrypted, and your backup codes, stored only as a one-way hash.
• Optional profile details: a phone number and a separate email address for notifications, if you choose to add them.
• Trading data you enter: portfolios, trades, positions, deposits, stop and target levels, journal notes, watchlists, price alerts and automatic-order rules.
• Broker connection details, if you connect a broker account. These credentials are stored encrypted and are used only to sync data with that broker on your behalf.

2. Information collected automatically

• A session cookie that keeps you signed in. It is strictly necessary and is removed when you sign out.
• A language cookie that remembers whether you chose English or Hebrew.
• Settings stored in your browser (local storage): theme, sidebar state, chart range, active portfolio and accessibility preferences. These stay on your device and are not sent to us.
• Standard server logs (such as IP address, time and requested page) kept for security and troubleshooting.
• A record of each sign-in, registration and password-reset attempt (the email address entered, IP address, time and whether it succeeded), kept for 30 days to block password-guessing and abuse.
• A security activity log for your account (sign-ins, password and two-factor changes, with IP address and browser type), kept for 90 days for the security of your account.

We do not use advertising cookies, analytics trackers or third-party marketing pixels. More detail is in our Cookie Policy.

3. How we use your information

• To provide the service: store your journal, calculate statistics and show your portfolio.
• To send the emails you ask for: price alerts, password resets and account notices.
• To keep the service secure, prevent abuse and fix problems.
• To meet legal obligations.

4. Who we share it with

We share information only with service providers that help us run Tradocus, and only as much as each one needs:

• Brevo, to deliver transactional email (your email address and the message content).
• Have I Been Pwned, to check whether a new password appears in known data breaches. Only the first 5 characters of the password's one-way (SHA-1) hash are sent; your password and email address never leave our server.
• Finnhub and Twelve Data, to fetch market prices and company data. They receive ticker symbols only, never your personal details.
• Google, if you choose "Continue with Google" to sign in (it confirms your email address, name and profile picture to us).
• Your broker, if you connect one, to sync your account.
• Our hosting provider, which stores the servers the service runs on.

5. Storage, security and retention

Your data is stored in our own database on a server we manage, with nightly encrypted backups. Each account can only access its own data. We keep your data for as long as your account is active. When you delete your account, your data is deleted from the live database immediately and drops out of backups as they rotate.

No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

6. Your rights

You can view and correct your details at any time in Settings, and you can delete your account and all its data from the Settings page. You may also ask us for a copy of your data, or ask us to correct or delete it, by writing to [email protected]. Depending on where you live, you may also have the right to complain to your local data protection authority (in Israel, the Privacy Protection Authority).

7. Children

Tradocus is not intended for anyone under 18, and we do not knowingly collect information from minors.

8. Changes to this policy

If we change this policy in a meaningful way, we will update the date at the top of this page and, where appropriate, notify you by email.

9. Contact

Questions about privacy? Email us at [email protected].