TradePath Privacy Policy

Effective October 9, 2026

1 Who we are

TradePath Inc., a Delaware corporation, operates TradePath AI (“we,” “us,” or “TradePath”). Contact support@tradepath.ai or write to 8 The Green STE R, Dover, Delaware 19901. This policy covers our website, trading journal, broker connections, AI features, Session Buddy for macOS and Windows, support, and billing. Our Terms govern service use; a separate recording and AI-processing agreement addresses recording authorization. This policy is not blanket consent or a waiver of privacy rights.

2 What we collect and why

Account and support information includes your name, email, required signup phone number, account identifiers, profile, timezone, preferences, onboarding answers, and correspondence or attachments sent to support. We currently require a phone number at signup but do not use it to contact you or verify your account. We offer Google and email/password sign-in; passwords are stored as hashes. We record age confirmation and the date and notice version of recording acceptance.

Trading and journal information includes imported or entered trades, orders, executions, prices, quantities, fees, profit and loss, timestamps, account identifiers and balances, notes, images, plans, strategies, tags, ratings, and self-reported emotions. We also store recordings, enabled microphone audio, transcripts, session analyses, AI chat history and answers, and relevant recording metadata.

Technical and billing information includes device, browser and app details, network information, usage and error reports, subscription identifiers, plans, payment status, and transaction information. Stripe handles card entry through hosted checkout; we do not receive full card numbers through that checkout. Your uploaded content may nevertheless contain payment information.

We use information to operate accounts and authorized broker connections; provide journaling, recording, replay, transcription, AI analysis and chat; administer payments; provide support and service messages; diagnose operational issues; protect security; and meet legal obligations. Marketing and optional improvement reviews are described below. AI features provide analysis and insights and do not execute broker orders.

3 Broker connections

We connect with Tradovate, cTrader, TopstepX, and NinjaTrader by directing users to their broker’s login page for API authorization. Initial synchronization retrieves all available history, subject to broker availability and permissions. Deleting a connection stops syncing, removes or revokes its authorization, and deletes its imported trades. You can also delete data for individual connected trading accounts without deleting your entire TradePath account.

4 Session Buddy

Session Buddy records one selected window or display, with optional microphone audio. Display capture can include unrelated windows, notifications, messages, or confidential information; do not assume automatic redaction. It does not directly capture system audio, webcam footage, or keystroke logs, although typed text can appear on screen. Pause temporarily suspends both screen recording and microphone capture. Stop ends both.

You accept a separate recording and AI-processing notice before first recording. Obtain any required rights, notices, and permissions before recording others or their information; your acceptance cannot provide their consent. Operating system permissions also apply.

Recordings are uploaded to Google Cloud in the United States for replay, and microphone audio remains in the video. We do not extract information from the recorded screen. Whisper runs on our U.S. RunPod server to create transcripts; temporary transcription audio does not remain there afterward. Temporary local recordings are deleted after successful upload or after retries following upload failure. Deleting an individual recording also deletes its transcript and AI analysis.

5 AI processing and product improvements

Together AI processes trading records, journal notes, and transcripts for analysis, and user messages for AI chat, using a DeepSeek model hosted by Together AI in the United States. Requests do not go directly to DeepSeek’s API. We do not send Together AI audio, video, screenshots, journal images, or separately added names, emails, account IDs, or timezones. Submitted text may itself identify someone. AI answers may be inaccurate.

TradePath does not train or fine-tune models on customer content and does not permit Together AI to use submitted content for model training.

We do not automatically use your content for product improvement. If you request a feature or improvement, we ask permission in a support conversation before reviewing private content or creating testing copies. We delete testing copies when the review is complete. You may withdraw permission by emailing support@tradepath.ai or replying in the same support conversation. We then stop the review and delete the testing copies. Content in your account is retained as described in Section 8. Customer data is not used for trading insights or statistics shared across users.

6 Providers and staff access

Providers receive information relevant to their roles: Google Cloud for storage and hosting, Google for sign-in, RunPod for transcription infrastructure, Together AI for AI processing, Stripe for payments, SendGrid for emails and engagement tracking, Sentry for technical error reporting, and Meta for public website advertising tracking. Sentry session replay is disabled.

Authorized developers and support staff, including personnel in Serbia, may access relevant customer data when necessary for support, troubleshooting, security, or maintenance. Optional improvement reviews require separate permission. We currently offer no feature for other users, mentors, or affiliates to browse or share your private content.

Necessary disclosures may also be made to professional advisers, authorities for legal obligations or valid process, to protect rights and safety, or in business transactions subject to applicable privacy requirements.

7 Website tracking and emails

Cookies or similar storage support authentication and preferences. Meta Pixel loads automatically on the public website. It is not active in the signed-in app. It may collect device or network identifiers and website events for advertising measurement and related purposes.

Signup automatically enrolls users in promotional emails. SendGrid sends marketing and service emails and tracks opens and link clicks. Use the unsubscribe link to stop marketing; necessary service messages continue.

8 Retention and deletion

Cancellation or the end of paid access does not automatically delete content. It remains until deleted or deletion is requested. You can delete your account in the app; this immediately deletes active service content, including recordings, audio, transcripts, journals, trades, and AI chats and analyses. Individual AI chat deletion is unavailable. Recording and broker deletion have the effects described above.

We retain billing records, support correspondence, security logs, and consent or acceptance records after account deletion for the relevant billing, support, security, legal, and accountability purposes. Provider-held records may be subject to separate contractual or legal retention requirements. Deleting your account does not erase copies you independently download. Testing copies are handled as described in Section 5.

9 Rights and international processing

For access, corrections, an export, deletion, or information about you in another person’s recording, contact support@tradepath.ai. Exports are provided through support rather than an in-app download. We verify requests using account information; lawful exceptions and proportionate verification may apply. Do not send passwords or unnecessary sensitive content.

Depending on applicable law, you may have rights to access, correction, deletion, portability, restriction, objection, consent withdrawal, certain disclosure or advertising opt-outs, and appeals. We respond within applicable legal deadlines. Withdrawal does not undo earlier lawful processing. Where applicable, you may complain to your data protection regulator, including your local EEA supervisory authority or the UK Information Commissioner’s Office. To submit a privacy request or appeal a response, email support@tradepath.ai. If you use an authorized agent, we may ask for evidence of their authority.

Google Cloud storage and databases, RunPod transcription, and Together AI processing are in the United States. Authorized staff may access data from Serbia; other providers may process in additional countries. Privacy laws may differ between countries. Contact support@tradepath.ai for information about the arrangements applicable to your data. Service availability is subject to legal and provider restrictions.

10 Security and other information

Recordings and database content are encrypted in transit and at rest, with access limited to authorized people for relevant purposes. No system is completely secure. We provide breach notifications as required by applicable law.

Users must be at least 18 and able to contract where they live; signup requires age confirmation. Report suspected underage accounts to support@tradepath.ai. This rule does not authorize recording children or other people.

We communicate material policy changes in the app and provide any additional legally required notice. Where changed processing requires fresh permission, we obtain it before that processing begins. Revisions do not retroactively authorize earlier collection or remove existing rights.