Privacy policy

The administrator of your personal data is the administrator of the daytradingsoftware.com service. For any question about privacy or to exercise your rights, write to [email protected].

• Account data: email address, a hash of your password, and hashed one-time confirmation codes sent to your email.
• Journal data: trades you enter by hand, CSV files with executions you import from your broker, tags, notes, chart snapshots and journal statistics.
• Product settings: saved scans, filters, alerts, watchlists, levels and notes.
• Billing data: plan, subscription status and invoice records. Card details are handled by the payment processor and are not stored by us.
• Usage logs: pages and features used, errors, timestamps and the IP address of the request.
• Marketing source: the UTM parameters and landing page of your first visit, for example which page led you to sign up.

• Providing the service you signed up for, including your account, scans, alerts, journal, backtests and AI day review: performance of a contract (Article 6(1)(b) GDPR).
• Billing, invoicing and keeping accounting records: legal obligation (Article 6(1)(c) GDPR).
• Security, fraud prevention, abuse detection and fixing errors: legitimate interest (Article 6(1)(f) GDPR).
• Measuring which pages and campaigns bring visitors, with aggregate server-side statistics: legitimate interest.
• Service emails such as confirmation codes, alerts you set, billing notices and important changes: performance of a contract.

If you live in a US state with a consumer privacy law, such as California under the CCPA as amended by the CPRA, this policy also serves as the notice at collection for the categories and purposes above.

We share personal data only with service providers that help us run DayTradingSoftware, under contracts that limit their use of it to providing services to us.

• Hosting provider in the EU or US that stores the service and its data.
• Payment processor that handles checkout, cards and subscriptions.
• Email delivery provider that sends confirmation codes, alerts and service emails.
• Licensed market data provider that supplies real-time and historical US market data. It does not receive your journal.
• AI model provider that processes the content of your journal for a session when you use the AI day review, to produce the summary. It is not allowed to use this content to train its models.

We may also disclose data where the law requires it. Where data is transferred outside the European Economic Area, we rely on adequacy decisions or standard contractual clauses.

We do not sell personal data and we do not share it for cross-context behavioral advertising.

• Account, settings and journal data: for as long as your account exists, and deleted within 30 days after you delete the account, except backups which are overwritten in their normal cycle.
• Billing and invoice records: for as long as tax and accounting law requires.
• Usage logs and IP addresses: up to 12 months.
• Unconfirmed sign-ups: deleted after 30 days.

Depending on where you live, you have the right to access your data, receive a copy in a portable format, correct it, delete it, restrict or object to processing based on legitimate interest, and withdraw consent where processing is based on consent. US residents of states with privacy laws can request to know, correct and delete their data and will not be discriminated against for exercising these rights.

Send requests to [email protected] from the email address on your account. We answer within one month under GDPR, or within the time set by your state law. You can also lodge a complaint with your local data protection authority.

The site sets only cookies that are strictly necessary: a session cookie that keeps you logged in, a security token that protects forms, and a cookie that remembers interface preferences. We do not use advertising cookies or tracking pixels, so there is no cookie banner.

Visit statistics are counted on our server without cookies and without building profiles of individual visitors.

Data is encrypted in transit and at rest. More detail is on the security page.

The service is intended for adults and is not directed to anyone under 18.

If we change this policy in a way that matters, we will update the date at the top and notify account holders by email.