Privacy Policy
We are committed to protecting your personal information. This page explains what data we collect, why we collect it, and how we keep it safe.
📋 1. Information We Collect
When you register or use Trading Journal, we collect the following personal data:
- Name: Used to personalize your account and verification email.
- Email Address: Used for account login, email verification, and service notifications.
- Password: Stored as a secure one-way bcrypt hash — we cannot see your actual password at any time.
- Trade Journal Data: Your personally entered trade logs (pair, PnL, notes, screenshots) are stored privately in our database and are accessible only to you and the platform administrator.
- Payment Information: We do not store any card or bank details. All payments are processed securely by Razorpay, which is PCI-DSS compliant. We only store your plan type, subscription status, and expiry date.
📋 2. How We Use Your Data
- To authenticate your login using secure server-side sessions.
- To send a one-time email verification link when you register (via Hostinger SMTP).
- To manage your subscription status (Free / Pro).
- To display your trade history and analytics within your private dashboard.
We do NOT sell, rent, share, or disclose your personal data to any third party, except where required by law or to provide the service (e.g., Razorpay for payment processing).
📋 3. Cookies & Sessions
This website uses server-side PHP sessions (via a secure, HttpOnly, SameSite cookie) to keep you logged in after authentication. No third-party tracking cookies (Google Analytics, Facebook Pixel, etc.) are used. You may clear your browser cookies at any time to end your session.
📋 4. Data Security
- Passwords are never stored in plaintext — only bcrypt hashes are saved.
- Sensitive config values (DB credentials, SMTP keys) are stored in server-side PHP files, not exposed to the browser.
- All pages are served over HTTPS on Hostinger's secure infrastructure.
- Email verification tokens are 64-character random hex strings, invalidated after use.
📋 5. Data Retention
Your account data is retained for as long as your account exists. You may request deletion of your account and all associated data by contacting us at contact@trading-journal.in. We will process the request within 7 working days.
📋 6. Your Rights
Under applicable Indian data protection laws, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and all personal data.
📋 7. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the bottom of this page will reflect any changes. Continued use of the platform after changes implies acceptance of the updated policy.
📋 8. Contact
For any privacy-related queries, please contact: contact@trading-journal.in
Last Updated: 21 April 2026 · Disclaimer · Terms of Service