Introduction
Welcome to LazyTrade ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading journal application and website at thelazytrade.com (the "Service").
By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.
Information We Collect
Personal Information
When you create an account, we collect:
- Email address
- Account credentials (encrypted password)
- Profile information you provide
Trading Data
When you use our Service, we collect and store:
- Trade information (symbols, entry/exit prices, dates, P&L, notes)
- Trading account names and configurations
- Screenshots you upload (optional)
- Custom settings and preferences
Payment Information
We use Stripe to process payments. We do not store your full credit card information. Stripe collects:
- Billing name and address
- Payment card details (processed securely by Stripe)
- Transaction history
Usage Data
We automatically collect:
- IP address and browser information
- Device type and operating system
- Pages visited and features used
- Time and date of visits
- Analytics data via Google Analytics
How We Use Your Information
We use the collected information for:
- Providing the Service: To create your account, store your trades, and provide analytics
- Processing Payments: To manage subscriptions and billing
- Communication: To send service updates, security alerts, and support messages
- Improvement: To analyze usage patterns and improve our features
- Security: To protect against fraud and unauthorized access
- Legal Compliance: To comply with legal obligations and enforce our terms
Data Storage and Security
Your data is stored securely using:
- Supabase: Our database provider with enterprise-grade security and encryption
- PostgreSQL: Industry-standard relational database with Row Level Security (RLS)
- Encryption: All data is encrypted in transit (TLS/SSL) and at rest
- Authentication: Secure password hashing and session management
While we implement strong security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but we strive to use commercially acceptable means to protect your data.
Data Sharing and Disclosure
We do not sell your personal information. We may share your data with:
- Service Providers: Supabase (database), Stripe (payments), Resend (email), Google Analytics (analytics)
- Legal Requirements: When required by law, subpoena, or legal process
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Protection: To protect our rights, property, or safety and that of our users
Your Data Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data (via Settings page)
- Export: Download your trading data in CSV format (Pro feature)
- Opt-out: Unsubscribe from marketing emails (we send very few)
- Portability: Transfer your data to another service
To exercise these rights, contact us at support@thelazytrade.com or use the account deletion feature in Settings.
Cookies and Tracking
We use cookies and similar technologies to:
- Essential Cookies: For authentication and security (required)
- Preference Cookies: To remember your settings (theme, timezone)
- Analytics Cookies: Google Analytics to understand usage patterns
You can control cookies through your browser settings, but disabling essential cookies may affect functionality.
Data Retention
We retain your data:
- Active Accounts: As long as your account is active
- Free Tier: Trade history limited to 30 days (older trades automatically deleted)
- Pro Tier: Full trade history retained indefinitely
- Deleted Accounts: Data permanently deleted within 30 days of account deletion
- Billing Records: Retained for 7 years for tax and legal compliance
Third-Party Services
Our Service integrates with third-party providers. Their privacy policies apply to data they collect:
Children's Privacy
Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
International Users
Your data may be transferred to and processed in countries other than your own. By using our Service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the new policy on this page
- Updating the "Last updated" date
- Sending an email notification for material changes
Your continued use of the Service after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Disclaimer: This Privacy Policy is provided as a template and should be reviewed by a qualified attorney to ensure compliance with applicable laws and regulations in your jurisdiction, including GDPR, CCPA, and other privacy laws.