Privacy Policy

Who we are

TradeJournal AI is a trading journal run by Nubri GmbH, Liebenowzeile 22, 12167 Berlin, Germany (info@nubri.co), the controller for the data described here.

What we store

• Your account: name, email address, a hashed password, plan, AI credits and Stripe customer number. Stripe handles card details.
• Your trading data: accounts you create, the fills and trades you import or enter (symbol, side, quantity, price, fees, time), tags, notes, statistics and AI reviews.
• Free analysis on our home page, without an account: the summary of the edge report (not your raw trades), kept so the shareable link works; and your email address if you leave it, with where you came from.

AI processing

For AI reviews, tagging and coaching, your trades and statistics for the period concerned are sent to OpenAI (United States). Under OpenAI's API terms, API data is not used to train its models. We never give investment advice and AI reviews are not financial advice.

Why, and on what basis

We process data to provide the service (Art. 6(1)(b) GDPR), and to keep it secure, follow up on free analyses where you left your email address, and see which pages bring visitors (Art. 6(1)(f) GDPR).

Who processes data for us

• Amazon Web Services (hosting)
• OpenAI (AI reviews)
• Stripe (payments)

Transfers to the United States rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. We do not sell data.

Retention and deletion

We keep data while your account exists. You can delete your account on the Billing page; that deletes your accounts, trades, reviews and credits. Invoices are kept by Stripe as tax law requires (up to 10 years).

Cookies and storage

We set no cookies. Your browser's local storage holds your sign-in tokens (if you sign in), a random visitor ID and where you first came from; we record the pages a visit starts on and the sign-up steps. No advertising or third-party tracking.

Server logs

Our web server logs each request: IP address, time, the address requested, the response, and your browser's user agent. We use the logs to keep the service running and secure (Art. 6(1)(f) GDPR); they are deleted automatically after at most 8 days.

Your rights

You can ask for access to, correction, deletion, restriction or export of your data, and object to processing based on legitimate interests: email info@nubri.co. You can also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.