Privacy Policy

1. Who we are

Tradee ("Tradee", "we", "us", or "our") provides strategy design, backtesting, paper execution, and Live API outputs. Tradee is not an exchange, broker, custodian, or exchange executor and is not affiliated with any exchange. This policy explains what data we process and your rights over it.

This policy is written to be consistent with the EU General Data Protection Regulation (GDPR). Tradee account data is hosted in Germany. Product analytics is processed in the United States, as described below.

2. Data we collect

We collect only the data needed to operate the service:

• Account data - your email address and a securely hashed password. We never store your password in plain text.
• API-output feed data - hash-only generated feed tokens, Modeled positions, event payloads, and feed access diagnostics. Tradee does not collect user exchange API keys.
• Trading configuration and modeled results - strategies, bots, backtests, Modeled positions, Reference prices, event payloads, and related settings. Modeled state is not exchange truth.
• Subscription and billing data - handled by our payment processor (see Section 6). We receive only the limited information needed to manage subscription status, included Assistant usage, and optional on-demand charges. We do not store your card details.
• Technical data - information generated through normal use, such as your IP address, browser type, and server logs, used for security, debugging, and reliability.
• Product analytics - PostHog, Inc. in the United States records page views, clicks, approximate location, device data, and session replay for the public site and the signed-in app, including a continuous recording from the marketing site into the app. Signed-in activity is tied to an internal public user id, role, and plan. We do not send your email address, assistant prompts, assistant replies, passwords, API keys, or feed URLs to PostHog. Replay masks form inputs and assistant message text. Analytics is used to operate and improve Tradee. It is not used for advertising.
• Communications - messages you send us (for example, support requests to support@tradee.bot).

3. How we use your data

• To provide, operate, and maintain the platform and your account.
• To evaluate strategies, maintain modeled state, and provide generated API output feeds.
• To manage your subscription, billing, and access to paid features.
• To send you essential service and transactional messages.
• To secure the platform, prevent abuse, and troubleshoot issues.
• To understand how the public site and app are used so we can improve them. This includes session replay of the public site and the signed-in app.
• To comply with legal obligations.

4. Legal bases for processing

Under the GDPR, we rely on the following legal bases: performance of a contract (to provide the service you sign up for), legitimate interests (to secure and improve the platform), consent (where required, such as optional communications), and compliance with legal obligations.

5. Cookies

We use a strictly necessary cookie to keep you signed in. PostHog also stores a first-party analytics cookie and local storage so a visit can be recognized across pages. See our Cookie Policy.

6. Sharing and service providers

We do not sell your personal data. We share data only with the limited service providers needed to run Tradee:

• PostHog, Inc. - product analytics and session replay. Event data is processed in the United States. PostHog's handling of that data is governed by its privacy policy and our data processing agreement.
• Dodo Payments - our merchant of record, which processes subscription and optional Assistant usage payments and handles your payment details. Its handling of your data is governed by its own privacy policy.
• Listmonk - the system we use to send account and service emails.

We may also disclose data where required by law. Account and billing data stay with the providers listed above.

7. Where your data is stored

Tradee account, trading, and billing data is hosted on servers located in Germany, within the European Union. Product analytics and session replay are processed by PostHog, Inc. in the United States.

8. Data retention

We retain account data while needed to provide the service and meet legal obligations. Output events are normally retained for the configured Tradee retention window (default 90 days). Closing an account triggers deletion or anonymisation where applicable, subject to legal and operational retention requirements.

9. Security

We use password hashing, signed sessions, hash-only feed tokens, HTTPS, scoped generated URLs, and rate-limited output feeds. No system is perfectly secure. You must protect generated feed URLs, durably deduplicate events, reconcile revisions, and secure any downstream exchange system you operate.

10. Your rights

Subject to applicable law, you have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection supervisory authority. To exercise any of these rights, contact us at support@tradee.bot.

11. Children

Tradee is not directed to, and may not be used by, anyone under 18 years of age.

12. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and where appropriate we will notify you.

13. Contact

For any questions about this policy or your data, contact us at support@tradee.bot.