Privacy Policy

1. Who we are

This Privacy Policy explains how ReplayTrader ("ReplayTrader", "we", "us") collects and processes personal data when you use our website and application at replaytrader.app. We are the data controller for the personal data described here.

If you have any questions about this policy or how we handle your data, please get in touch via our contact page.

2. Information we collect

We collect the following categories of personal data:

• Account information — your name, email address, and profile image, provided when you sign up via our authentication provider.
• Billing information — your subscription tier and billing status. Card details are handled directly by Stripe and are never stored on our servers.
• Usage and trade data — the replay sessions, simulated trades, notes, tags, and ratings you create within the app.
• Technical data — IP address, device and browser information, and cookies necessary for authentication and security.

3. How we use your data

We process your personal data on the following lawful bases:

• To provide the service (performance of a contract) — creating your account, running replay sessions, saving your journal, and managing your subscription.
• For legitimate interests — securing the platform, preventing abuse, and improving the product.
• To comply with legal obligations — for example, retaining records required for tax and accounting.
• With your consent — where consent is the appropriate basis, such as optional communications. You may withdraw consent at any time.

4. Third-party processors

We share data with carefully selected service providers who process it on our behalf, only as needed to deliver the service:

• Clerk — user authentication and account management.
• Stripe — subscription billing and payment processing.
• Neon — managed PostgreSQL database hosting your account, session, and trade data.
• Upstash — caching of market data.
• Vercel — application hosting and content delivery.
• Dukascopy Bank SA — source of historical market price data (no personal data is shared with Dukascopy).
• Anthropic — powers the optional AI Mentor feature; trade summaries you submit are processed to generate feedback.

5. Cookies

We use cookies that are strictly necessary for the platform to function — primarily authentication and session cookies set by Clerk, and cookies set by Stripe during checkout. These are essential to provide a secure, logged-in experience and cannot be disabled while using the app.

6. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we are required to retain certain records (such as payment records) to meet legal obligations.

7. Your rights

If you are in the UK or EU, you have rights under the UK GDPR and EU GDPR, including the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Request a copy of your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority (in the UK, the Information Commissioner’s Office).

8. International transfers

Some of our processors are located outside the UK/EU, including in the United States. Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms offered by those providers.

9. Security

We take reasonable technical and organisational measures to protect your data, including encryption in transit and reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

ReplayTrader is not intended for anyone under the age of 18, and we do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "last updated" date above, and where appropriate we will notify you.

12. Contact

For any privacy-related request or question — including to exercise any of the rights above — please reach us through our contact page.