TradeForge is a trading name of Denis Krosniqi, an individual based in Albania, who is the controller of your personal data. Contact: support@tradeforgelive.com.
1. What we collect
- Account data: email, username, hashed password, Google ID if you use Google sign-in, timezone.
- How you found us: the campaign source, referral code and platform named in the link you signed up from, if it had any, and your answer to "Where are you right now?" during signup, if you give one.
- Trading data you import or sync: accounts, trades, P&L, notes.
- Journal content you write: trade notes, emotions, mistakes, day notes, strategies, screenshots.
- Billing identifiers: Paddle customer and subscription IDs. Paddle holds your payment details.
- Technical data: country from your IP address for security, where available, login times, and product analytics and error reports if you accept analytics cookies.
2. Why we use it and on what basis
| Purpose | Lawful basis |
|---|---|
| Provide the service | Contract, Art. 6(1)(b) |
| Security, fraud and account-sharing detection | Legitimate interest, Art. 6(1)(f) |
| Learning which links bring sign-ups, and fitting onboarding to where you are in your trading | Legitimate interest, Art. 6(1)(f) |
| Product analytics and error tracking | Consent, Art. 6(1)(a), given in the cookie banner |
| Transactional email | Contract, Art. 6(1)(b) |
| Product-update emails, off until you turn them on | Consent, Art. 6(1)(a) |
| Weekly summary of your own trading stats by email, which you can turn off in Settings or from the email | Legitimate interest, Art. 6(1)(f) |
| Legal obligations such as tax records | Legal obligation, Art. 6(1)(c) |
| Journal content that may reveal health | Explicit consent, Art. 9(2)(a), given when you create your account. Withdraw it in Settings |
3. Broker connections
If you connect cTrader, TradeLocker or another broker, you authorise us to read your trades and account information from the broker through its API. For cTrader we store encrypted access tokens. For TradeLocker we store your TradeLocker login email and your password, encrypted, and use them to sign in for you. We never place trades. You can disconnect at any time, which deletes these stored credentials.
4. Who we share it with
| Recipient | Role | Location |
|---|---|---|
| Supabase | Database | Frankfurt |
| Render | Application hosting | Frankfurt |
| Cloudflare | Site delivery, file storage, DNS | Cloudflare global network |
| PostHog | Analytics and error tracking | EU cloud (Frankfurt) |
| Resend | Email delivery | United States |
| Paddle | Payments and tax; independent controller of your payment data | United Kingdom |
| Sign-in | United States | |
| GitHub | Runs the daily database backup job | United States |
| Spotware/cTrader and other brokers you connect | Source of your trading data | Per broker |
We do not sell your personal data and do not use it for advertising.
5. International transfers
We are based in Albania. Where data moves outside the country where you live, we rely on the European Commission's Standard Contractual Clauses and, where a vendor is certified, the EU-US Data Privacy Framework, as set out in our vendor agreements. You can request a copy of the safeguards at support@tradeforgelive.com.
6. How long we keep it
| Data | Retention |
|---|---|
| Account data and consent records | Until you delete your account |
| Journal data | Until you delete your account, or delete your journal notes in Settings |
| Login location data | Until your session expires, at most 7 days, then deleted within a day |
| Email verification links | Stop working after 24 hours. The record is deleted about 7 days later |
| Password-reset links | Stop working after 60 minutes. The record is deleted about 7 days later |
| Sync logs | 90 days |
| Backups | Up to 30 days. Data you delete stays in existing backups until they expire |
| Billing records | Paddle keeps payment and tax records under its own policy. We keep your Paddle customer and subscription IDs until you delete your account |
7. Your rights
You can access, correct, delete, export, restrict and object to our use of your data, and withdraw consent at any time. You can export or delete your data in Settings. We reply within one month. You can also write to support@tradeforgelive.com.
8. Complaints
You can complain to the Albanian Information and Data Protection Commissioner (idp.al), or to the data protection authority where you live or work.
9. Security
Data is encrypted in transit. Broker access tokens and stored broker passwords are encrypted at rest. Passwords are hashed. We will notify you and the authorities of a breach as the law requires.
10. Children
TradeForge is for adults aged 18 or over. We do not knowingly collect data from anyone under 18.
11. Cookies and similar technologies
See our Cookie Policy.
12. Automated decisions
We do not make decisions with legal or similarly significant effects by automated means.
13. Changes
We will tell you by email or in-app notice 30 days before material changes.
14. US state privacy
We do not sell or share personal information as defined by California law.