Privacy Policy

1. Introduction

TRADA LLC ("Trada," "we," "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use Trada, its website (trada.io), and related services. This policy complies with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Australian Privacy Act 1988, and other applicable data protection laws.

2. Data Controller

TRADA LLC acts as the data controller for personal data collected through the Services. Our registered address is 254 Chapman Rd, Ste 208 #27194, Newark, Delaware 19702, United States. For questions or requests regarding your data, contact our Data Protection Officer at privacy@trada.io.

3. Information We Collect

• Account information: Name, email address, and account preferences provided during registration.
• Usage data: Service interaction data, feature usage, session duration, and device/browser information collected automatically.
• Technical data: IP address, browser type, operating system, and referral URLs.
• Integration data: When you connect third-party brokerage accounts, we process connection tokens and trade data necessary to provide the copy trading and journaling services. We do not access or store your brokerage account passwords.

We do not collect or process: payment card numbers (handled by third-party processors), government-issued identification, brokerage account balances or financial statements, or any data beyond what is necessary to provide the Services.

4. How We Use Your Information

We use your data to:

• provide and maintain the Services (copy trading and journaling functionality);
• communicate with you about your account, service updates, and support requests;
• improve the Services through aggregated, anonymized usage analytics;
• comply with legal obligations; and
• send marketing communications only with your explicit consent (you may opt out at any time).

We will never sell your personal data to third parties.

5. Legal Basis for Processing (GDPR)

Under GDPR, we process your data on the following legal bases:

• Contract performance — processing necessary to provide the Services you requested;
• Legitimate interest — improving the Services, fraud prevention, and security;
• Consent — marketing communications and non-essential cookies;
• Legal obligation — compliance with applicable laws and regulations.

6. Data Sharing

We may share your data with:

• service providers who assist in operating the Services (hosting, analytics, email delivery), under strict data processing agreements;
• legal authorities when required by law or to protect our rights; and
• business successors in the event of a merger, acquisition, or asset sale.

We do not share personal data with advertisers, data brokers, or any third party for marketing purposes.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. When transferring data outside the EU/EEA, we ensure appropriate safeguards through Standard Contractual Clauses (SCCs) or adequacy decisions as required by GDPR.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Account data is retained while your account is active and for 12 months after account deletion. Usage and analytics data is retained in anonymized form. You may request deletion of your data at any time.

9. Data Security

We implement industry-standard technical and organizational measures to protect your data, including:

• encryption in transit (TLS 1.3) and at rest;
• access controls and authentication;
• regular security assessments; and
• incident response procedures.

No system is completely secure. We commit to promptly notifying affected users and authorities of any breach as required by law.

10. Cookies and Tracking

We use essential cookies required for the Services to function. Non-essential cookies (analytics, marketing) are only placed with your explicit consent. You can manage cookie preferences at any time through our cookie settings.

11. Your Rights

Depending on your jurisdiction, you have the right to:

• Access — request a copy of your personal data;
• Rectification — correct inaccurate data;
• Erasure — request deletion ("right to be forgotten");
• Portability — receive your data in a machine-readable format;
• Restriction — limit how we process your data;
• Object — opt out of certain processing; and
• Withdraw consent — at any time.

To exercise these rights, contact privacy@trada.io. We will respond within 30 days.

EU residents may file a complaint with their local Data Protection Authority. California residents have additional rights under CCPA, including the right to know what personal information is collected and the right to opt out of sale (Trada does not sell personal data). Australian residents may contact the OAIC regarding privacy complaints.

12. Children's Privacy

The Services are not intended for individuals under 18. We do not knowingly collect data from minors. If we discover we have collected data from a minor, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or the Services. The "Last Updated" date indicates the most recent revision.

14. Contact

For privacy-related inquiries: privacy@trada.io.