Privacy Policy

Effective 5 November 2026

In short: we collect only what we need to run your account, the simulator and your subscriptions: your email, your demo account data and your plan status. We do not sell your data, we never see your card details, and we use Google Ads and Meta (Facebook and Instagram) tags only to measure whether our ads lead to sign-ups and subscriptions.

1. Who we are

Tradex Bot (tradexbot.io) is a trading simulator with optional paid plans (Bot Pro and Smart Money Map). This policy explains what personal data we handle when you use the site and what choices you have. Contact: [email protected].

2. What we collect

Data	Where it comes from	Why
Account details: email address, a securely hashed password (or your Google account email if you sign in with Google), sign-up and last sign-in times, whether your email is confirmed	You, when you sign up or log in. Stored by Supabase, our sign-in provider.	To create your account, log you in, confirm your email and help you recover access
Demo account data: virtual balance, open positions, trade history, leverage, bot settings, bot activity log, and balance and equity records	Your use of the terminal and auto trader	To run the simulator and the server-side auto trader, and to show your history and records
Subscription data: Stripe customer and subscription IDs, plan, status, renewal date and whether the plan is set to cancel	Stripe, when you subscribe or your plan changes	To give you access to the plans you pay for and manage billing
Payment details (card number etc.)	Entered directly on Stripe's checkout page	Processed only by Stripe. We never see or store them.
Waitlist email	You, if you join the live-accounts waitlist	To tell you if live accounts become available
Messages	You, when you email us	To answer you
Advertising measurement data: that you visited our pages, signed up or bought a plan (with the plan price and a checkout reference), plus the identifiers Google and Meta set in your browser	The Google Ads tag and the Meta Pixel on our pages	To measure which ads lead to sign-ups and subscriptions, and to show our ads to people who visited the site
Technical data: IP address, browser type, pages requested, time, errors	Your browser. Recorded in our web host's standard server logs and by the services listed below.	To deliver the site, keep it secure, prevent abuse and fix problems

We do not collect identity documents, bank details or real trading accounts.

3. How we use it

to provide the simulator, the auto trader (including running it on our server while you are away) and Smart Money Map;
to manage subscriptions, access and billing, and to answer billing questions;
to send account emails, such as email confirmation and password resets, and important notices about the service or these policies;
to keep the site secure, enforce our Terms, limit abuse and fix errors;
to understand overall use in aggregate, for example the number of sign-ups and active bots.

We do not sell your personal data. We do not use it to make automated decisions that have legal or similarly significant effects on you.

4. Legal bases

Where data protection laws such as the GDPR apply, we rely on these legal bases:

Performance of a contract: running your account and plans.
Legitimate interests: security, preventing abuse and improving the service.
Consent: the waitlist. You can withdraw consent at any time.
Legal obligations: for example, keeping billing records.

We share personal data only with service providers that help us run Tradex Bot, and only what they need:

Supabase: user accounts, sign-in and the waitlist.
Stripe: payments, subscriptions, invoices and the billing portal. Stripe processes card details under its own privacy policy.
Google: if you choose "Continue with Google", and for web fonts (your browser requests fonts from Google's servers).
Market data providers: your browser may connect to a price feed directly to load live prices, so the provider receives your IP address. It does not receive your account details.
jsDelivr: delivers some of the site's code libraries to your browser.
Google Ads and Meta Platforms (Facebook and Instagram): receive advertising measurement data through their tags on our pages, under their own privacy policies. We do not send them your email address, your trades or your account data.
Our web hosting provider: stores the site, server logs and server-side account data.

We may also disclose data:

if the law requires it;
to protect our rights or users' safety;
as part of a sale or reorganisation of the service, in which case this policy continues to apply.

6. Browser storage and cookies

The site stores some data in your browser's local storage so it works properly:

your sign-in session (set by Supabase), so you stay logged in;
your demo account, chosen timeframe and bot settings, so they are there when you return;
your Smart Money Map view (instrument, timeframe and layers).

You can clear this at any time in your browser settings. Clearing it logs you out and may reset demo data that is stored only in your browser.

We also use the Google Ads tag and the Meta Pixel, which set cookies and similar identifiers so Google and Meta can measure our ads and show them to people who visited the site. They are used for advertising measurement only. You can limit them through your browser's cookie and tracking settings, your Google ad settings and your Facebook ad preferences.

7. How long we keep it

Account and demo data: while your account exists. Server-side bot records are trimmed automatically over time.
Subscription records: as long as billing, tax and accounting rules require. For invoices, which Stripe holds, this is typically up to 7 years.
Waitlist: until you ask to be removed or we stop offering the waitlist.
Server logs: kept by our host for a limited period, usually a few weeks.

When you ask us to delete your account, we delete or anonymise your personal data within 30 days, except what we must keep by law.

8. Security

We protect your data in these ways:

Connections to the site use HTTPS.
Passwords are hashed by our sign-in provider.
Server-side account files are stored outside the public website folder.
Payment pages are hosted by Stripe, and payment notifications sent to us are checked against Stripe's signature.

No system is perfectly secure. If we learn of a breach affecting your data, we will notify you as the law requires.

9. Your rights

Depending on where you live, you may have the right to:

access, correct, delete or export your personal data;
object to or restrict some uses;
withdraw consent.

To use these rights, email [email protected] from your account email. We will reply within 30 days. You can also complain to your local data protection authority.

You can manage your subscription and invoices yourself from Manage billing. To leave the waitlist, email us.

10. International transfers

Our providers may process data in countries other than yours, including the United States and the European Union. Where required, these transfers rely on safeguards such as the providers' standard contractual clauses.

11. Children

Tradex Bot is for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

12. Changes and contact

We may update this policy. We will post the new version here with a new effective date, and tell you about significant changes by email or on the site. Questions or requests: [email protected].