1. Overview
Traders Journal (“we”, “us”, or “our”) operates the website tradersjournal.co.in and all associated services (collectively, the “Service”). This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data.
By using the Service you agree to the collection and use of information in accordance with this policy.
2. Data We Collect
We collect the following categories of data:
Account Information
Your name and email address when you register, provided directly by you or via Google Sign-In.
Gmail Data
When you connect your Gmail account, we request read-only access to your emails. We access only emails that contain broker contract note attachments. We do not read, store, or transmit the body or subject of any email unrelated to contract notes. The text and PDF content of contract note emails is processed solely to extract trade data.
Contract Note PDFs
PDF attachments from contract note emails are temporarily processed in memory to extract trade fields (date, broker, P&L, charges, client ID). Raw PDF files are not stored persistently.
Trade Data
Extracted trade records — including trade date, broker, gross P&L, net P&L, and charge breakdown — are stored in your private journal and are only accessible by you.
Broker Credentials
If you add a PDF password for a broker, it is encrypted using AES-256 before storage. Plaintext passwords are never stored.
Telegram Chat ID
If you connect Telegram, your Telegram chat ID is stored to route P&L notifications to your account.
Usage Data
Standard server logs (IP address, browser type, pages visited, timestamps) are collected for security, debugging, and service improvement.
3. Google API — Limited Use Disclosure
Important — Google API Data
Traders Journal's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we commit to the following with respect to Google user data:
- ✓We only request the minimum Gmail scopes required to detect and read contract note emails.
- ✓We do not use Gmail data for advertising purposes.
- ✓We do not allow humans to read user Gmail data unless you have explicitly given permission, we have obtained your affirmative agreement, it is necessary for security purposes, or it is required by law.
- ✓Gmail data is never sold to third parties.
- ✓Gmail data is used only to provide or improve the trade journalling functionality of the Service.
- ✓Gmail data is not transferred to third parties except as necessary to provide the Service (e.g., processing pipelines within our own infrastructure).
4. How We Use Your Data
- ✓To create and maintain your account.
- ✓To read contract note emails from your connected Gmail account and extract trade data on your behalf.
- ✓To populate your private P&L dashboard, equity curve, and trade history.
- ✓To send Telegram P&L notifications when you have connected a Telegram account.
- ✓To detect duplicate trades and warn you before insertion.
- ✓To detect charge discrepancies against your broker's standard rates.
- ✓To send transactional emails (email verification, password reset).
- ✓To improve and secure the Service.
5. Data Sharing & Third Parties
We do not sell your personal data. We share data only as follows:
Supabase
Database & AuthenticationYour account data, trade records, and encrypted credentials are stored in Supabase (hosted on AWS). Supabase acts as a data processor under our instructions.
View their privacy policy →We use Google OAuth 2.0 for sign-in and the Gmail API for reading contract note emails. Google's privacy policy governs their data handling.
View their privacy policy →Telegram
NotificationsIf you opt in, your Telegram chat ID is used to send P&L notifications via the Telegram Bot API.
View their privacy policy →We may also disclose data if required by law, court order, or to protect the rights and safety of users or the public.
6. Data Retention
Your account data and trade records are retained for as long as your account is active. Draft trade records that you do not confirm are deleted automatically after 24 hours. If you close your account, you may request deletion of all your data by contacting us at support@tradersjournal.co.in. We will process deletion requests within 30 days.
7. Data Security
We implement the following security measures:
- 🔒All data is transmitted over HTTPS/TLS.
- 🔒Broker PDF passwords are encrypted with AES-256 before storage. Plaintext is never stored.
- 🔒Database access is restricted via Row Level Security (RLS) — each user can only read their own data at the database level.
- 🔒OAuth tokens are stored securely and never exposed client-side.
- 🔒Our infrastructure is hosted on AWS (via Supabase) with industry-standard access controls.
No method of transmission over the internet or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your data but cannot guarantee absolute security.
8. Your Rights
You have the right to:
- ✓Access the personal data we hold about you.
- ✓Correct inaccurate data in your profile or settings.
- ✓Request deletion of your account and all associated data.
- ✓Revoke Gmail access at any time via your Google Account settings (google.com/account/about/). Revoking access will stop automatic parsing of future emails but does not delete existing trade data.
- ✓Export your trade data via the Excel export feature in the dashboard.
To exercise any of these rights, contact us at support@tradersjournal.co.in.
9. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such information.
10. Changes To This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Where changes are material, we will notify you via email or a prominent notice in the Service. Your continued use of the Service after any changes constitutes acceptance of the new policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: