Privacy Policy

We collect only what the product needs to work. That falls into four buckets:

• Account & profile data. Your email address, display name, authentication credentials (including passkeys), plan and billing status, and the preferences you set inside the app.
• Broker connection data. When you connect a brokerage account, the credentials you provide are encrypted at rest and used solely to establish the connection. Once the connection is established, stored login credentials are wiped — we keep only the tokens needed to sync your trade history. We can read your fills; we can never place a trade.
• Trade & journal content. Your imported and manually entered trades, notes, tags, attachments, voice notes and their transcriptions, backtesting sessions, strategies, dashboards, and anything else you create in your journal.
• Usage data. Standard logs and product analytics — pages visited, features used, device and browser type, and IP address — used to keep the service reliable and improve it.

We use your data to:

• Provide, operate, and improve the service — syncing trades, computing analytics, rendering dashboards, and keeping your journal available across devices.
• Power AI features you invoke. TerraAI and Agents process your journal data to answer your questions about your trading, using OpenAI as our AI provider — see AI features & third-party AI providers. Your data is never used to train AI models — ours or anyone else’s — and is never shared with or sold to third parties for their own purposes.
• Communicate with you about your account: receipts, security notices, and product updates you can opt out of.
• Protect the service — detecting abuse, fraud, and security incidents.

We do not sell your personal data, and we do not share your trading data with advertisers. Period.

TerraAI (our assistant) and Agents (automations you enable) are powered by AI models from OpenAI. OpenAI is the only third-party AI service we send your personal data to. Nothing is sent to it unless you use TerraAI, or run or enable an Agent.

When you do, we send OpenAI:

• Your messages. What you type or select to ask TerraAI, earlier messages in the same conversation, and any file you attach to a message.
• Trading data the request needs. Trades (symbols, dates, prices, size, and P&L), tags, strategies, ratings, journal notes, broker account names, and performance statistics — selected from your account for that question or Agent task, not your whole journal.
• TerraAI memories and context. Preferences and facts you have asked TerraAI to remember (such as your timezone or trading rules), and the screen you asked from, such as the trade you were viewing.

How we collect it. Messages come from what you enter in TerraAI. Trading data comes from your TerraTrade account — broker syncs, imports, and what you enter yourself — and our servers retrieve only what a request needs, sending it to OpenAI over an encrypted connection. Your password, broker login credentials and tokens, and payment details are never sent.

How it is used. Solely to generate TerraAI’s answers and Agents’ results for you, and to keep the memories you ask TerraAI to keep. OpenAI processes this data as our service provider under its API business terms: it may use the data only to provide the service to us, must keep it confidential and secure, does not use it to train its models, and may retain it for up to 30 days to monitor for abuse before deleting it. That is the same standard of protection this policy gives your data. Your conversations themselves are stored by TerraTrade, not OpenAI, and are deleted with your account.

Your permission. The TerraTrade mobile app asks for your permission before it sends anything to OpenAI, and you can withdraw it at any time in Settings › TerraAI. If you decline, TerraAI and Agents stay off in the app and the rest of TerraTrade works as usual.

Payments are processed by Stripe. Your card number never touches TerraTrade’s servers — we receive only what we need to manage your subscription: the last four digits, card brand, expiry, and billing status. Stripe’s handling of your payment data is governed by its own privacy policy.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the product is used. Session cookies are essential — the app can’t work without them. Analytics cookies help us see which features matter; they are first-party and never used to track you across other sites.

We keep your data for as long as your account is active. Your data exports freely — you can export your trades, journal entries, and analytics from the app at any time, in standard formats, on every plan. We will never hold your trading history hostage.

After account deletion, we remove your personal data from production systems promptly and from encrypted backups on a rolling schedule, except where the law requires us to retain specific records (for example, billing records).

You can delete individual trades, notes, and attachments at any time from inside the app, and you can delete your entire account from settings. Account deletion is permanent: your journal, connected broker tokens, and AI conversation history are removed. If you prefer, contact support@terratrade.app and we’ll handle the deletion for you.

Depending on where you live, you may have additional rights — access, correction, portability, and objection — and we honor reasonable requests regardless of jurisdiction.

• Encryption in transit (TLS) and at rest for all customer data, with broker credentials and tokens under additional application-level encryption.
• Passkey support for phishing-resistant sign-in, alongside conventional authentication.
• Least-privilege access internally: production data access is restricted, logged, and reviewed.
• Broker connections are read-only by design — TerraTrade cannot place, modify, or cancel orders on any connected account.

No system is perfectly secure. If we ever discover a breach that affects your personal data, we will notify you without undue delay.

TerraTrade is for adults. The service is not directed to anyone under 18, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

We may update this policy as the product and the law evolve. For material changes we will notify you — by email or an in-app notice — before the changes take effect. The effective date at the top of this page always reflects the current version.

Questions, concerns, or requests about your data: support@terratrade.app. We read everything and reply fast. See also our Terms of Service.