Privacy Policy

This policy explains what personal data FlowDigital s.r.o. ("we"), operator of TradeNail, collects, why, and what rights you have over it. We're based in the Czech Republic and process data under the EU General Data Protection Regulation (GDPR).

1. What we collect

• Account info: name, email address, hashed password.
• Trading data you enter or import: trades, notes, journal entries, backtest sessions.
• Exchange API keys, if you connect an exchange — encrypted at rest (AES-256) and never shown again after entry.
• Billing info: handled directly by Stripe — we don't store card numbers.
• Basic usage data (pages visited, feature usage) for reliability and support.

2. How we use it

To run the service (sync trades, compute stats, process payments), respond to support requests, and — only if you opt in — send you product updates by email.

3. Marketing emails

We only send marketing/product-update emails to people who explicitly opt in at signup and confirm via a link sent to their inbox (double opt-in). Every marketing email includes an unsubscribe link, and you can withdraw consent at any time. Transactional emails (confirmations, password resets, login codes) are sent regardless of marketing consent, as they're necessary to operate your account.

4. Who we share data with

We use the following processors to run TradeNail:

• Supabase — database, authentication
• Vercel — application hosting
• Stripe — payment processing
• Resend — transactional and marketing email delivery
• Anthropic — powers the AI Chat feature (your trade data is sent to Anthropic's API only when you use AI Chat)

We never sell your data.

5. Cookies

We use strictly necessary cookies to keep you logged in. Any analytics or marketing cookies are only set after you consent via the cookie banner.

6. Your rights

Under GDPR you can request access to, correction of, or deletion of your personal data, export your data, and object to or restrict certain processing. Email support@tradenail.com to exercise any of these rights.

7. Data retention

We keep your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we're required to keep records (e.g. billing records) for legal reasons.

8. Security

Exchange API keys are encrypted at rest with AES-256-GCM. Access to your data is protected by row-level security in our database, scoped to your account only.

9. Changes

We may update this policy from time to time. Material changes will be communicated by email or in-app notice.

10. Contact

FlowDigital s.r.o., Uralská 689/7, Bubeneč, 160 00 Praha 6, Czech Republic — support@tradenail.com