Privacy Policy.
What TradeWize collects, why we collect it, who touches it, and the choices you have. Written under GDPR Articles 13 and 14.
What we collect.
- Account data, such as username and email address.
- Usage data, such as lessons completed, simulator actions, and app interactions.
- Device and browser data, such as IP address, browser type, and diagnostics.
- Cookies and local storage used for sessions and app functionality.
- Payment metadata for Premium subscribers: a tokenized customer identifier issued by Stripe, the plan you are on, and your subscription status. We do not see or store your card number, CVC, or expiry. Stripe holds those details directly.
- Billing region (country, and where required by law a postal code) for VAT and equivalent indirect tax calculation by Stripe Tax.
How the data is used.
- Provide and improve educational and simulation features.
- Maintain account access and security.
- Process and manage Premium subscriptions, including billing, renewals, refunds, and tax compliance.
- Analyze usage trends and fix technical issues.
- Communicate product updates, support responses, and legal notices.
Our lawful bases for processing under the GDPR are: performance of a contract with you (account and subscription operation), our legitimate interests (security, fraud prevention, product improvement) where those interests are not overridden by your rights, your consent (where we ask for it), and compliance with legal obligations (tax, accounting, dispute resolution).
Who else touches the data.
TradeWize does not sell personal information. Data may be shared with the following categories of service providers, who act as data processors and only handle the data needed to perform their function:
- Stripe — payment processing, subscription billing, tax calculation, and the customer portal.
- Hosting and infrastructure providers used to run the application.
- Analytics providers, used in aggregate to understand product usage.
We may also disclose information when required by law, or as part of a business transfer (such as a merger or acquisition) where permitted by law.
Payment processing.
All payments for Premium subscriptions are processed by Stripe Payments Europe, Limited (“Stripe”). When you upgrade, you are redirected to a Stripe-hosted page to enter your payment details.
Stripe is certified to PCI-DSS Level 1, the highest available standard, and holds your full card number, security code, and expiry on its systems. TradeWize receives only a tokenized reference to you as a Stripe customer, your subscription metadata (plan, status, current period end), and your billing region. We do not see your card number at any point.
Stripe receives your email address and IP address for fraud prevention and to send receipts. Stripe Tax may collect your billing country and, where required, postal code to calculate VAT or equivalent indirect tax.
Stripe’s processing of your data is governed by Stripe’s own privacy notice, available at stripe.com/privacy.
Cookies and tracking.
TradeWize uses cookies and similar technologies for authentication, preferences, and basic analytics. You can manage cookies through your browser settings, though some features may not work properly if cookies are disabled.
How long we keep it.
Information is retained only as long as necessary to provide services, comply with legal obligations (including tax and accounting record requirements that may apply to subscription billing), resolve disputes, and enforce policies.
Your rights under GDPR.
Under the GDPR and other applicable laws, you may have rights to:
- access the personal data we hold about you,
- have inaccurate data corrected,
- request deletion of your data, subject to legal retention requirements,
- request a portable copy of your data,
- object to or restrict certain processing,
- withdraw consent where processing is based on consent.
To exercise these rights, contact [email protected]. You also have the right to lodge a complaint with your local data protection supervisory authority.
Children’s privacy.
TradeWize is not intended for children under 13 without parental or guardian consent where required by law.
Security posture.
TradeWize uses reasonable technical and organizational safeguards to protect user data. Payment data is held by Stripe under PCI-DSS Level 1 certification. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.
Updates to this policy.
This Privacy Policy may be updated periodically. Material updates will be reflected by a revised “Last updated” date.
If your region provides additional statutory privacy rights, contact [email protected] and we will process requests according to applicable law.