Privacy Policy

This Privacy Policy explains what information MindOverTrade ("we", "us", "our") collects, how we use it, and the choices you have. It applies to your use of the MindOverTrade Service.

1. Information we collect

Account information: name, email address, and password (stored hashed, never in plain text).

Trading and journal data: everything you choose to record — trades, entry/exit prices, position sizes, strategies, rules, psychology/emotion tags, notes, and account balances you enter. This is financial information about your own trading activity, not brokerage credentials — MindOverTrade never asks for or stores brokerage login details.

Screenshots: chart screenshots you upload are stored in encrypted object storage, automatically stripped of embedded metadata (EXIF/GPS/ICC data) on upload, and resized where oversized. Only you can access your own screenshots; they are never shared, indexed publicly, or used for any purpose beyond displaying them back to you in the Service.

Billing information: if you subscribe to a paid plan, our payment provider (Stripe or Razorpay) processes your payment method directly — we receive only a subscription status, plan, renewal date, and provider-issued customer/subscription identifiers, never your full card or bank account number.

Usage and device information: IP address, browser/device type, and pages visited, collected for security (e.g., detecting a new-device login), rate limiting, abuse prevention, and error monitoring. Approximate region (country-level, from your network address) is used only to show pricing in your local currency and is never used to charge you a different, unresolvable amount without your knowledge.

2. How we use your information

• To provide, maintain, and improve the Service — including analytics computed from your own trade history.
• To process payments and manage your subscription.
• To send account-related communications (verification, password reset, security notices) and, if you opt in, product updates.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal information, and we do not use your trading data to train third-party AI models.

3. Who we share it with

We share information only with service providers who help us operate MindOverTrade, each bound by contract to use it only for that purpose: our database and infrastructure host, our object-storage provider (for screenshots and avatars), our email delivery provider (for transactional email), our payment provider (Stripe or Razorpay), and error-monitoring tooling (Sentry, if enabled). We do not share your trading data with other users, advertisers, or data brokers.

4. Data retention

We retain your data for as long as your account is active. If you delete your account, your profile, trades, screenshots, and every other record we hold about you are permanently deleted, including the underlying screenshot files in object storage — see Section 6 for exactly what "delete" covers.

Demo Account: every account gets one permanent, system-managed Demo Account, intended for trying the Service out rather than long-term journaling. Trades on the Demo Account (and their screenshots) are automatically and permanently deleted on a rolling 15-day basis — once a trade passes that window, it is removed the same way account deletion removes data, not just hidden. This applies regardless of your plan; it is not a consequence of being on the Free plan, though the Free plan can only write to the Demo Account. Real trading accounts on any plan are never subject to this rolling deletion.

5. Your rights

You can, at any time, from Settings:

• Export your data — a complete JSON export of your profile, trades, journal entries, screenshots' metadata, strategies, rules, risk manager history, milestones, and every other record tied to your account.
• Delete your account — permanently and irreversibly removes everything listed above, including screenshot files themselves, not just the database rows referencing them.
• Correct or update your profile information directly in Settings.

These rights are available regardless of where you're located, consistent with GDPR-style data-subject rights.

6. Security

Passwords are hashed, not stored in plain text. Screenshots are stripped of metadata and access-controlled per account. Two-factor authentication is available and recommended. All traffic is encrypted in transit. We log security-relevant events (logins, password changes, exports, deletions) for audit purposes. No system is perfectly secure, and we can't guarantee absolute security, but we treat your trading data and account credentials as sensitive by design throughout the Service.

7. Cookies

We use a small number of essential cookies for authentication (a secure, httpOnly session cookie) and CSRF protection. We do not use third-party advertising or tracking cookies.

8. Children's privacy

MindOverTrade is not directed at children under 18 and we do not knowingly collect information from them.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Service or email before they take effect.

10. Contact

Questions about this policy, or requests regarding your data, can be sent to the contact address listed on our website.

This document is a standard SaaS/fintech-journal Privacy Policy template drafted for MindOverTrade's pre-launch build. It has not been reviewed by a lawyer and should be reviewed by qualified legal counsel before any real launch.