Privacy Policy

Last updated 17 September 2026 · Versión en español

This describes what TradingZona actually stores, and it is written from the system rather than from a template. The short version: we collect what an account needs to work, we set no tracking cookies, we run no analytics or advertising, and we never sell anything about you.

1.Who we are

TradingZona operates the website and application at tradingzona.com and is the controller of the personal data described here. For anything in this policy — including a request to see or delete your data — write to support@tradingzona.com.

2.What we collect

Category	What it is
Account	Email address, full name, country, your stated trading experience and your main market. You give these when registering.
Authentication	Your password, stored only as a bcrypt hash — never in readable form. The 6-digit email verification code is also stored hashed, and is erased once used.
Your work	Strategies, journal entries and their screenshots and notes, trading plans, backtest and optimization runs, portfolios, robots and the signals they produce.
Credentials you add	API keys for the exchanges, brokers, market-data providers and AI providers you choose to connect, and your Telegram bot token and chat id if you enable alerts. Stored against your account on our server, never compiled into the page.
Billing	The subscription and transaction identifiers PayPal gives us, your plan, and the dates of your period. We never receive your card number.
Data you import	Executions and balances pulled from an exchange or broker you connected, when you ask for them.
Diagnostics	Error records written when something in the application fails: what broke, where, and a fingerprint used to group repeats. They exist so faults reach us instead of being lost.

3.What we do not collect

No analytics and no advertising. There is no Google Analytics, no tag manager, no advertising pixel and no third-party tracker in the site or the application.
No tracking cookies of our own. Your session is held as a token in your browser's own storage, not in a cookie we set. The PayPal checkout component sets its own cookies when you open it — that is PayPal's, under their policy.
No selling or sharing for advertising. We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are used in California law.
No use of your work to train models. Your strategies and journal are not training data.

4.Why we process it, and on what basis

To provide the Service you bought — your account, your saved work, your robots, your imports. Basis: performance of a contract.
To take payment and manage your subscription. Basis: performance of a contract, and a legal obligation for records.
To verify your email address before a purchase. Basis: our legitimate interest in preventing fraud and in a receipt that reaches you.
To keep the Service working and secure — diagnostics, rate limits, abuse prevention. Basis: legitimate interest.
To send service email — verification, receipts, trial reminders, and notices about a change to your plan. These are not marketing and are part of the Service. Basis: performance of a contract.

5.Who else processes it

Processor	What reaches them
PayPal	Your payment. They take the money, and give us the subscription identifiers and status. They are the controller of your payment details.
Our email sender	The email address and the content of the service email being sent to you.
Our mail host	Any message you send to an @tradingzona.com address.
Our hosting provider	The server where the application and its database run. They provide infrastructure and do not use your data.
The AI provider you choose	Only what you send to the assistant, with the API key you supplied. Their terms and their retention apply to it. If you connect none, none is contacted.
Telegram	Only if you enable alerts: your signal messages, sent through the bot you created.
Exchanges, brokers and data providers	Only the ones you connect, and only the requests you asked for.

We add no processor that is not needed to deliver something you asked for.

6.Where it is stored

Your account, your work and your credentials are stored in a PostgreSQL database that runs on our own server infrastructure, not in a third-party data platform. Backups are held on the same infrastructure.

7.How long we keep it

While your account exists, we keep your account and your work so that the Service can show it to you.
When you ask us to delete your account, your personal data and your content are deleted. Records we must keep for tax or accounting — a record that a payment happened, and its amount — are retained for as long as the law requires, and no longer.
Diagnostic error records are technical and short-lived, and are not used to build any profile of you.

8.How it is protected

Everything travels over TLS.
Passwords are hashed with bcrypt and are never stored or logged in readable form.
API keys you add are held server-side against your account and are never included in the code the browser downloads.
Sign-in is rate-limited, and the verification code is attempt-limited and erased once used.
No security is absolute. If a breach affects your personal data, we will notify you and any regulator that must be told, without undue delay.

9.Your rights

Wherever you live, you can ask us to: give you a copy of your data; correct it; delete it; export your work in a portable form; or stop a particular processing. If you are in the European Economic Area or the United Kingdom, these are your rights under the GDPR, including the right to complain to your data-protection authority. If you are in California, you have the rights to know, delete, correct and opt out under the CCPA/CPRA — and, as stated above, we do not sell or share personal information, so there is nothing to opt out of.

Write to support@tradingzona.com. We answer within 30 days, and we do not charge for it or treat you differently for asking.

10.International transfers

The Service is operated from Miami, Florida, United States and its processors may be located elsewhere. Where personal data of someone in the European Economic Area or the United Kingdom is transferred outside it, that transfer relies on the European Commission's Standard Contractual Clauses or an equivalent safeguard.

11.Children

The Service is not for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.

12.Changes and contact

If this policy changes, the date at the top changes with it, and we will tell you about a material change by email or in the application. For anything at all: support@tradingzona.com.