Privacy Policy

1. Introduction

VASA Trend AI LLC, a Delaware limited liability company, doing business as “VASA Traders” (“we,” “us,” or “our”), respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our platform at vasatraders.com/discipline-journal (“the Service”).

2. Information We Collect

2.1 Account Information

When you register, we collect your name, email address, and password (hashed). If you sign in with Google OAuth, we receive your name, email, and profile image from Google. We do not receive or store your Google password.

2.2 Trading Data

You may provide your own trade history via CSV upload, manual entry, or an optional read-only connection to your broker (for example, Interactive Brokers) that imports your past trade records only. This includes trade symbols, dates, prices, quantities, profit/loss, fees, and notes. Any broker connection is read-only and is used solely to import your trade history: VASA does not place, execute, or support any trading, cannot move or withdraw funds, and does not ask you to enter any brokerage credentials on our website. If you choose to connect Interactive Brokers, you provide a read-only IBKR Flex Query reporting token that you generate in your own IBKR account; it grants read-only access to your trade history only, cannot be used to place trades or move funds, and is stored encrypted. We store the trade-history data you provide to give you analytics, behavioral analysis, and educational learning content.

2.3 Questionnaire and Assessment Data

You may answer trading psychology questionnaires. Your responses are used by the AI to generate personalized behavioral analysis and educational learning content.

2.4 Payment Information

Payments are processed by Stripe. We do not store your credit card number, CVC, or full billing details. We store only your Stripe customer ID and subscription status to manage your account.

2.5 Usage Data

We collect anonymized usage analytics through Google Analytics, including pages visited, session duration, and device type. We also use Sentry for error tracking, which may capture technical information about errors you encounter (browser version, error stack traces).

2.6 Cookies

We use essential cookies for authentication (session tokens, CSRF protection). We also use Google Analytics cookies for anonymized usage tracking. No advertising or third-party tracking cookies are used.

3. How We Use Your Information

We use your information to:

• Provide the Service: trade analytics, AI-assisted behavioral analysis, educational learning content, coaching feedback, and rule monitoring
• Process payments and manage your subscription
• Send transactional emails: password resets, onboarding tips, daily/weekly trading summaries, and coaching reports
• Generate AI-powered insights using Anthropic Claude (your trading data is sent to Anthropic's API for processing but is not stored by Anthropic for model training)
• Monitor and improve the Service through error tracking and analytics
• Enforce our Terms of Service and prevent abuse

4. Data Sharing

We do not sell your personal data. We share data only with the following service providers, solely for operating the Service:

• Anthropic — AI processing for behavioral analysis and coaching (trade data sent via API; Anthropic does not retain data for training)
• Stripe — Payment processing
• Resend — Transactional email delivery
• Sentry — Error tracking and performance monitoring
• Google Analytics — Anonymized usage statistics
• Interactive Brokers — Optional read-only import of your own trade history, only if you choose to connect. Used to import trade records for analysis only — never to place or execute trades.

We may also disclose information if required by law, court order, or government regulation.

5. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on secure infrastructure. All connections to the Service are encrypted via HTTPS/TLS. Passwords are hashed using bcrypt. Sensitive configuration data is encrypted at the application layer.

While we implement industry-standard security measures, no system is completely secure. You are responsible for keeping your account credentials confidential.

6. Data Retention

We retain your account and trading data for as long as your account is active. If you delete your account, we will delete your personal data and trading records within 30 days, except where retention is required by law (e.g., payment records for tax purposes).

Anonymized, aggregated data (e.g., total platform trade counts) may be retained indefinitely and cannot be used to identify you.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data we hold
• Correct inaccurate personal data
• Delete your account and associated data
• Export your trade data (CSV export available in the dashboard)
• Object to processing of your data for certain purposes
• Withdraw consent for optional data processing at any time

To exercise any of these rights, contact us at [email protected].

8. Push Notifications

With your permission, we may send browser push notifications for trading alerts, rule violations, and coaching reminders. You can disable push notifications at any time in your notification settings or browser settings.

9. Community Features

If you opt into community features (public profile, accountability partners), certain information you choose to share (display name, discipline score, streaks, achievements) will be visible to other users. You control what is shared through your community profile settings. Your email, trade data, and financial information are never shared with other users.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

11. International Data Transfers

Your data may be processed by our service providers in countries outside your own. We ensure appropriate safeguards are in place, including standard contractual clauses where applicable.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. The “Last updated” date at the top reflects the most recent revision.

13. Contact Us

If you have questions about this Privacy Policy or your data, contact us at [email protected].