Alpha Journal

1. Overview

At Alpha Journal, we recognize that your trading data is your most valuable asset. This policy outlines how we handle, protect, and utilize the data you provide while using our high-performance trading protocol.

2. Data Collection

We collect the following data points to provide our services:

Identity: Name, email address, and authentication credentials.
Execution Data: Trade history, symbols, entry/exit prices, position sizes, and psychological tags.
Metadata: IP addresses, browser types, and session duration for security and optimization.

3. Legal Basis (UK/EU GDPR & CCPA)

We process your data under the following legal bases:

Contractual Necessity: To provide the journaling and AI coaching services you requested.
Legal Obligation: To comply with financial and tax regulations in the UK.
Legitimate Interest: To secure our platform against fraud and optimize performance.

4. Data Rights

Under the UK/EU GDPR and CCPA, you have the right to:

Access and export your trading data at any time.
Rectify inaccurate personal data we hold about you.
Request the permanent deletion of your account and all associated records.
Restrict or object to the processing of your data, including for marketing purposes.
Data portability — receive your data in a structured, machine-readable format (JSON/CSV).

*You can exercise the export and deletion rights directly within your Terminal Settings.

5. Data Retention

We retain your personal and execution data for as long as your account remains active. When you delete your account, all associated records — trade history, accounts, tags, playbooks, and your profile — are permanently purged from our database within 30 days. We may retain limited records longer only where required to comply with legal, tax, or accounting obligations (typically up to 6 years under UK law), after which they are securely erased.

6. Third-Party Sub-Processors

We rely on the following trusted sub-processors to operate the platform. Each is bound by a data processing agreement:

Supabase: Database hosting, authentication, and file storage.
Anthropic: AI coaching analysis (processes trade data you submit to the AI Coach).
Resend: Transactional and account-related email delivery.
Stripe: Subscription payment processing (we never store your card details).

7. International Data Transfers

Some of our sub-processors (including Supabase, Anthropic, Stripe, and Resend) are based in or process data in the United States and other countries outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), EU Standard Contractual Clauses (SCCs), and the EU-US/UK Data Privacy Framework, to ensure your data receives an equivalent level of protection.

8. Cookies

We use strictly necessary cookies to keep you authenticated and to maintain your session and security state. These are essential to the operation of the terminal and cannot be disabled without breaking core functionality. We do not use third-party advertising or cross-site tracking cookies. Your theme and interface preferences may be stored locally in your browser.

9. Children's Data

Alpha Journal is not intended for, and may not be used by, anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a person under 18, we will delete it promptly. If you believe a minor has provided us with personal data, please contact us.

10. Right to Complain

If you are based in the UK and believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. We ask that you contact us first so we can try to resolve your concern directly.

11. Contact & Support

For any privacy-related inquiries or data requests, contact our team at our monitored support channel:
support@alphajournal.co.uk