The data controller responsible for your personal data is:

For any questions or requests relating to your personal data, please contact us at the address above.

We collect the following categories of personal data:

Account data

• Full name
• Email address
• Password (stored in hashed form - never readable)
• Subscription plan and billing status

Trading data

• Trade history imported from connected trading platforms (open/close prices, volume, profit/loss, timestamps)
• Notes and tags you add manually
• Playbook content and strategy rules you create

Payment data

• Payments are processed by Stripe. We do not store your card number or full payment details. We only receive a payment confirmation and a Stripe customer reference.

Technical data

• IP address and browser/device type, collected automatically when you access the Service
• Session data necessary for the Service to function

We use your data solely to operate and improve the Service:

• To create and manage your account
• To provide the journaling, analytics, and reporting features of the platform
• To process your subscription payments via Stripe
• To send transactional emails (account confirmation, password reset, billing notifications, and free trial reminders)
• To respond to your support requests
• To maintain the security and integrity of the Service

We do not use your data for advertising, profiling, or any purpose beyond what is described above.

Under GDPR, we process your personal data on the following legal bases:

• Contract performance - processing your account data and trading data is necessary to provide the Service you subscribed to
• Legitimate interests - processing technical data to maintain security and prevent fraud
• Legal obligation - retaining billing records as required by Portuguese and EU law

Your data is stored on secure servers provided by Amazon Web Services (AWS). AWS is certified under ISO 27001 and other industry security standards.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure, including encrypted connections (HTTPS), hashed passwords, and access controls.

We share your data only with the following third-party services, which are strictly necessary to operate the Service:

We do not sell your data to third parties. We do not share your data with advertisers or marketing platforms.

Tracker Fx uses only essential cookies - small files stored in your browser that are strictly necessary for the Service to function. These include:

• Session cookies to keep you logged in during your visit
• Security cookies to protect against cross-site request forgery (CSRF)

We do not use advertising cookies, tracking cookies, or any third-party analytics cookies.

We retain your personal data for as long as your account is active. If you cancel your subscription, your data remains stored until you explicitly request its deletion.

To delete your account and all associated data, contact us at support@trackerfx.com. We will process your request within 30 days.

Billing records may be retained for longer where required by Portuguese or EU tax and accounting law, independently of account deletion.

Under GDPR, you have the following rights regarding your personal data:

• Right of access - request a copy of the personal data we hold about you
• Right to rectification - request correction of inaccurate or incomplete data
• Right to erasure - request deletion of your personal data ("right to be forgotten")
• Right to restriction - request that we limit the processing of your data in certain circumstances
• Right to data portability - request your data in a structured, machine-readable format
• Right to object - object to processing based on legitimate interests

To exercise any of these rights, contact us at support@trackerfx.com. We will respond within 30 days. You also have the right to lodge a complaint with the Portuguese data protection authority, the CNPD (Comissão Nacional de Proteção de Dados), at cnpd.pt.

Tracker Fx is not directed at children. The Service requires users to be at least 18 years of age. We do not knowingly collect personal data from anyone under 18. If we become aware that a minor has created an account, we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where changes are material, notify you by email.

Continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

For any privacy-related questions or to exercise your rights, please contact us: