Privacy Policy

Last Updated: 2025-01-26
Effective Date: 2025-01-26

1. Information We Collect

We collect the following types of data to provide and improve our services:

• Trading preferences and widget configurations
• Anonymous usage data through essential cookies
• Device and browser information
• Optional email address for account creation/recovery

If using self-hosted instances: No data collection by us unless you explicitly enable telemetry through configuration

2. How We Use Your Data

• Maintain user preferences and service functionality
• Improve platform performance and security
• Prevent fraudulent activity
• Comply with financial regulations (GDPR, CCPA, etc.)

3. Third-Party Services & Data Sharing

Official Hosted Service

If using our official hosted versions at:

• tradercore.dev
• tradercore.net
• tradercore.app

We may utilize:

• Cloud Providers: Vercel/Linode for hosting (IP addresses, request logs)
• Analytics: PostHog
• Payment Processors: Stripe - only if you implement payments
• Security: Cloudflare (DDoS protection, firewall)

Self-Hosted Instances

When self-hosting this open-source application:

• You control all data storage and third-party integrations
• No data is shared with us unless explicitly configured
• Any third-party services used are subject to your own privacy policy

Data Disclosure

We only share personal data when:

• Required by law (court orders, legal requests)
• Necessary to prevent imminent harm or illegal activities
• Explicitly authorized by user through OAuth integrations

4. Data Security Measures

• AES-256 encryption for all transactions
• Regular security audits and penetration testing
• Optional two-factor authentication
• SOC 2 Type II compliant infrastructure

For self-hosted deployments: Security responsibility lies with your implementation and infrastructure choices

5. User Rights & Controls

• Right to access personal data
• Right to request data deletion
• Cookie preference management
• Data portability requests
• Withdrawal of consent (where applicable)

6. Data Retention

• Active user data: Retained while account is active
• Inactive accounts: Deleted after 24 months
• Transaction records: Archived for 7 years per financial regulations

7. International Transfers

• Data processed in GDPR-compliant jurisdictions
• Standard Contractual Clauses (SCCs) for cross-border transfers

8. Policy Updates

Changes will be communicated through:

• Platform notifications
• Email alerts (for registered users)
• Updated revision date at top of policy

9. Contact Information

For privacy-related inquiries: Email: privacy@tradercore.net
Data Protection Officer: dpo@tradercore.net