Privacy Policy

SuperTrader ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading journal platform and related services.

We collect information you provide directly to us, including: • Account information (name, email address, password) • Trading data you choose to log (trades, notes, screenshots, P&L records) • Payment information (processed securely through Stripe — we never store card numbers) • Broker connection credentials (stored encrypted, read-only access only) • Communications you send to us

We use the information we collect to: • Provide, maintain, and improve our services • Process transactions and send related information • Send you technical notices, security alerts, and support messages • Respond to your comments, questions, and requests • Analyze usage patterns to improve user experience • Generate anonymized, aggregated insights (never personally identifiable) • Send marketing communications (only with your consent, opt-out any time)

We implement industry-standard security measures to protect your personal information: • All data is encrypted in transit (TLS 1.3) and at rest (AES-256) • CSV imports are parsed entirely in your browser — trade data is not sent to our servers unless you are signed in • Broker API connections are strictly read-only — we cannot place trades on your behalf • We regularly review and update our security practices • We do not sell your data to any third party, ever

We retain your information for as long as your account is active or as needed to provide you services. If you close your account, we will delete your personal data within 30 days, except where retention is required by law. You can request deletion of your data at any time by contacting us at privacy@supertrader.com.

You have the following rights regarding your personal data: • Access — Request a copy of all data we hold about you • Correction — Request correction of inaccurate data • Deletion — Request deletion of your data ("right to be forgotten") • Portability — Export your trading data in CSV or JSON format at any time • Opt-out — Unsubscribe from marketing communications at any time • Restriction — Request that we restrict processing of your data To exercise any of these rights, contact us at privacy@supertrader.com.

We use the following third-party services that may collect information about you: • Stripe — Payment processing (governed by Stripe's Privacy Policy) • Cloudflare — CDN and DDoS protection • Supabase — Database hosting (SOC 2 Type II certified) • Resend — Transactional email delivery Each third party is governed by their own privacy policy. We carefully vet all third-party providers and require data processing agreements where applicable.

We use only essential cookies required for the service to function (session management, authentication). We do not use third-party advertising cookies or tracking pixels. You can disable cookies in your browser settings, though some features may not function correctly.

If you have any questions about this Privacy Policy or how we handle your data, please contact us: Email: privacy@supertrader.com Response time: within 2 business days Super Trader Inc. 123 Market Street San Francisco, CA 94105