Privacy Policy.

Effective date: September 28, 2026. This policy describes what Tradolux collects, why, and your rights. We'll update this page as Tradolux's product changes — including when any paid subscription tier launches — and will note the date of the most recent update above.

What we collect today

Tradolux currently collects:

• Waitlist email addresses: voluntarily provided when you join the waitlist. Used only to notify you when paid tiers launch.
• Analytics data: basic anonymized usage metrics via Netlify.
• Local browser storage: watchlists, alerts, and signal history stored in your browser's localStorage. This data is on your device only; Tradolux does not have access to it unless you explicitly sync it (future feature).

Cookies & Analytics

Tradolux uses Netlify Analytics to understand aggregate site usage (e.g., which pages are visited) without tracking individual users across other sites or building an advertising profile. We do not use third-party advertising cookies or sell data to ad networks.

We may also use essential cookies or browser storage needed to keep you signed in and make the site work.

What we don't collect

• We do not sell your data.
• We do not share your email with third parties.
• We do not track your trading activity.
• We do not have access to your broker account unless you choose to connect one for automated trading (see below).
• We do not have access to your financial information.

Third-party services

Tradolux uses the following third-party services that may process your data:

• Netlify: hosting and serverless functions
• Anthropic (Claude): AI chat and analysis generation. Prompt content sent to Anthropic may include your current chart state.
• Alpaca: market data. If you choose to connect your Alpaca brokerage account to enable automated trading, Tradolux will access that account only as needed to place and manage the trades you authorize. You can disconnect it at any time.
• Finnhub, FRED: news, fundamentals, macro data
• Supabase: user account and subscription data
• Stripe: payment processing

Data Retention

We retain waitlist and account emails for as long as you have an active account or waitlist signup, or until you ask us to delete them — whichever is sooner. If you request deletion, we remove your personal data within 30 days, except where we're required to keep records for longer (for example, payment and invoice records tied to a paid subscription, which we retain for up to 7 years for tax and accounting purposes). Aggregated, anonymized usage metrics are retained indefinitely since they can't be tied back to an individual.

Security

Tradolux is served over HTTPS, which encrypts data in transit between your browser and our servers. Our application data is stored with Supabase, which encrypts data at rest. Payment processing is handled entirely by Stripe, a PCI-DSS certified payment processor — Tradolux does not store your card details on its own systems. While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure.

Your rights

Regardless of where you're located, you can ask us what personal data we have about you, ask us to correct it, or ask us to delete it, by emailing contact@tradolux.com. We aim to respond within 30 days. If you're located in the European Economic Area, the United Kingdom, California, or another jurisdiction with its own privacy law, you may have additional specific rights under that law, and we'll honor applicable requests as required.

Children's Privacy

Tradolux is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at contact@tradolux.com and we will delete it.

Contact

This policy is issued by Herold Pierre, doing business as Tradolux. Privacy questions: contact@tradolux.com