Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and authentication credentials through our authentication provider (Supabase Auth). When you use our services, we collect usage data through our product analytics processor, PostHog, acting on our instructions: page views, clicks and other interactions captured automatically (autocapture), and product events such as patterns viewed. If you are signed in, these events are tied to an identifier associated with your account so your activity can be connected across sessions and devices. See Section 5 for when this collection happens and how to opt out.

2. How We Use Your Information

We use your information to:

• Provide and maintain our chart pattern detection services
• Manage your account and subscription tier
• Send alerts and notifications (Premium tier only, with your consent)
• Improve our pattern detection algorithms and user experience
• Enforce rate limits and prevent abuse

3. Data Storage & Security

Your data is stored securely in our PostgreSQL database hosted on Supabase with Row Level Security (RLS) enabled. All data transmission is encrypted via HTTPS. We do not sell your personal data to third parties.

4. Data Retention

We retain your account data — including your watchlist, saved scans, votes and comments — for as long as your account is active. If you delete your account, we will remove your personal data within 30 days.

Other data has its own lifecycle, because it is held by different systems for different purposes:

• Detection history — the chart patterns we detect on market data are not personal data: they describe price action on a ticker, not you. We keep them indefinitely, because our historical win-rate statistics are computed over the full detection history and shorten as it is trimmed. The oldest detections currently date to 2011.
• Product analytics — events collected by PostHog (see Section 5) are held under PostHog’s data retention, which we currently have configured to 12 months. You can stop collection entirely at any time using the opt-out control in Section 5, and you can ask us to delete the analytics events already associated with you.
• Payment records — retained as required by applicable tax and accounting regulations (typically 7 years).

Anonymized aggregate data (e.g., pattern win-rate statistics) may be retained indefinitely.

5. Cookies & Tracking

We use essential cookies for authentication and session management, which are not affected by anything on this page. For product analytics, we use PostHog, and when analytics tracking loads depends on where you are visiting from:

• EU/EEA and UK visitors: nothing loads until you accept the cookie banner. You can decline, and no analytics events are sent.
• Visitors elsewhere: analytics may load by default on your first visit, without asking first. You can opt out below at any time, and it takes effect immediately on this device.

We honor the Global Privacy Control (GPC) browser signal as an opt-out everywhere, regardless of location: if your browser sends GPC, we treat it the same as an explicit decline and analytics does not load. The one exception is your own explicit choice — if you have opted in on this device using the control below, that choice is kept and is not overridden by GPC. Use “Opt out” below to change it back at any time.

Session recording (replay of what you did on screen) is disabled. We do not currently capture session replay for any visitor.

6. Third-Party Services

We use the following third-party services:

• Supabase — Authentication and database
• Stripe — Payment processing
• PostHog — Product analytics
• Sentry — Error monitoring
• EODHD — Market data

7. Your Rights

You have the right to access, update, or delete your personal data at any time. You can delete your account and all associated data from your account settings. For data-related requests, contact us at the email below.

8. GDPR (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Lawful basis: We process your data based on consent (account creation, and analytics — see Section 5, where nothing loads for EU/EEA and UK visitors until you accept), contractual necessity (service provision), and legitimate interest (security).
• Right to erasure: Request complete deletion of your personal data.
• Right to portability: Request a copy of your data in a machine-readable format.
• Right to restriction: Request that we limit processing of your data.
• Right to object: Object to processing based on legitimate interest.

To exercise these rights, contact us at the email address below.

9. CCPA (California Residents)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of personal information. We do not sell your personal information.
• Non-discrimination for exercising your privacy rights.

10. Children's Privacy

TradingPatterns.io is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 13 (or 16 in the EEA). If we become aware that we have collected data from a child, we will delete it promptly.

11. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

12. Contact

For privacy-related questions or concerns, contact us at privacy@tradingpatterns.io.