Privacy Policy

This Privacy Policy explains how CHRISWARDDIGITALSERVICES LIMITED (company no. 17300115), a company registered in England and Wales, trading as TradeGrade ("we", "us", "our") collects, uses, and protects your personal data when you use tradegrade.co.uk (the "Service"). We are committed to handling your data responsibly and in accordance with UK GDPR and the Data Protection Act 2018.

1. Who we are

CHRISWARDDIGITALSERVICES LIMITED (company no. 17300115) is a company registered in England and Wales, trading as TradeGrade. Registered office: 27 Old Gloucester St, London, WC1N 3AX. For any questions about this policy or your data, contact us at info@tradegrade.co.uk.

2. What data we collect

2.1 Account information

• Email address, used for account creation, login, and essential service communications
• Password (stored as a secure hash via our authentication provider, Supabase — we never see or store your password in plain text)

2.2 Billing information

• Subscription tier, billing status, and payment history — processed and stored by Stripe, our payment provider. We do not store your card details, PayPal credentials, or other payment method details ourselves.

2.3 Trading journal data

• Trade data you enter or import (symbols, prices, quantities, times, P&L, notes) is stored locally in your browser and automatically backed up to our secure cloud database (Supabase) when you are signed in. This backup is used to restore your data when you log in on any device. You can delete your data at any time from within the app — deletion removes data from both local storage and the cloud backup permanently.
• When you use AI Analysis, the trade data and any chart images you submit for that specific request are sent to Anthropic's Claude API for processing, and the resulting analysis is temporarily stored in our database to deliver the result back to you.

2.4 Usage data

• Basic technical data such as IP address, browser type, and pages visited, collected automatically by Netlify (our hosting provider) for security and service reliability purposes.

3. How we use your data

• To provide and maintain the Service, including authentication, billing, and AI-powered analysis features
• To communicate with you about your account, billing, or significant changes to the Service
• To respond to support requests
• To detect, prevent, and address technical issues, fraud, or abuse

We do not sell your personal data, and we do not use your trading data to train AI models.

4. Who we share data with

We use the following third-party processors to operate the Service. Each processes data only as necessary to provide their specific function:

• Supabase — authentication and database hosting
• Stripe — payment processing and subscription billing
• Netlify — website and application hosting
• Anthropic — AI analysis processing (only for data you explicitly submit via the AI Analysis feature)

We do not share your data with any other third party for marketing or advertising purposes.

5. Data retention

We retain your account and billing data for as long as your account remains active, and for a reasonable period afterward as required for legal, accounting, or fraud-prevention purposes. AI analysis results stored in our database are retained to allow you to review past analyses while your account is active. Trade data stored locally in your browser remains under your control — clearing your browser storage will delete it, and we recommend exporting your data periodically as a backup.

6. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at info@tradegrade.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

7. Data security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure password hashing, and access controls on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. International data transfers

Some of our service providers (including Supabase, Stripe, Netlify, and Anthropic) may process or store data outside the UK. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your data remains protected to UK GDPR standards.

9. Children's privacy

The Service is not directed at, and we do not knowingly collect data from, anyone under 18.

10. Cookies and local storage

TradeGrade uses a small number of strictly necessary technologies to operate the Service:

• Authentication session token — a secure cookie set by Supabase to keep you logged in during your session. This is strictly necessary for the Service to function and does not require your consent under UK PECR.
• Local storage — your browser's local storage is used to cache your trade data for fast offline access. This is not a cookie and is not subject to PECR consent requirements.

We do not use analytics cookies, advertising cookies, tracking pixels, or any other non-essential storage technologies. No cookie consent banner is displayed because none is required — we use only strictly necessary technologies.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact us

For any questions about this Privacy Policy or how we handle your data, email info@tradegrade.co.uk.