Privacy Policy

1. Who We Are

TradingField (“we”, “us”, “our”) is a trading alert platform operated from Verneuil-sur-Seine, Paris, France. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Service.

For GDPR purposes, TradingField is the data controller. Contact: privacy@tradingfield.app

2. Data We Collect

We collect the following categories of personal data:

• Account data — email address, name, password hash, profile avatar.
• Authentication data — Google OAuth tokens, 2FA secrets (stored encrypted).
• Alert configuration — symbols, conditions, thresholds you set.
• Notification settings — Telegram chat ID, Discord webhook URL, phone number (Pro/SMS).
• Billing data — subscription plan, payment status. Card details are handled exclusively by Stripe and never stored on our servers.
• Usage data — pages visited, features used, browser type, IP address, timestamps.
• Cookie data — see our Cookie Policy.

3. How We Use Your Data

We use your data to:

• Provide, operate, and improve the Service.
• Send price alert notifications on your behalf.
• Process payments and manage subscriptions.
• Send transactional emails (OTP, account confirmations, billing receipts).
• Respond to support requests.
• Analyze usage patterns to improve the product (aggregated, anonymized).
• Comply with legal obligations.

We do not sell your personal data. We do not use your data for automated trading decisions.

4. Legal Basis (GDPR)

We process your data on the following legal bases:

• Contract performance — to deliver the Service you signed up for.
• Legitimate interests — security, fraud prevention, product analytics.
• Consent — marketing emails and non-essential cookies (you may withdraw at any time).
• Legal obligation — compliance with applicable French and EU law.

5. Third-Party Services

We share data with trusted processors only to the extent necessary:

• Stripe — payment processing.
• Firebase (Google) — push notifications.
• Twilio — SMS and WhatsApp notifications (Pro plan).
• Google Analytics / GTM — usage analytics (cookies, anonymized IPs).
• Hosting providers — cloud infrastructure for data storage and processing.

All processors are contractually bound to handle your data in accordance with GDPR.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it by law (e.g., billing records for 5 years under French tax law).

7. Your Rights (GDPR)

As a data subject under GDPR, you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Restriction — request restricted processing in certain circumstances.

Exercise your rights at privacy@tradingfield.app. We respond within 30 days. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at cnil.fr.

8. Data Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage of sensitive fields, and strict access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. International Transfers

Some of our processors (e.g., Firebase, Twilio) may process data outside the EU/EEA. In such cases we rely on Standard Contractual Clauses approved by the European Commission to ensure adequate protection.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified by email or prominent in-app notice at least 14 days before taking effect.

11. Contact

Data protection inquiries: privacy@tradingfield.app
TradingField — Verneuil-sur-Seine, Paris, France