Privacy Policy

This policy explains how Trad Nora handles account and product data. It is a product baseline — not a substitute for legal counsel.

What we store

• Account profile (name, email), password hash, optional 2FA secrets, and subscription package
• Trades, alerts, journal entries, favorites, and watchlists you create
• Capital account names, balances, P/L summaries, primary-capital flags, and linked trade references when Capital is enabled for your package
• Public wallet addresses and labels you save (never seed phrases or private keys)
• Gas-assist / Need-gas request metadata you submit (network, address, amount notes) for Admin review — not private keys
• Team membership and invite records (invited email, inviter, expiry); invite emails are sent to the address you specify
• Encrypted per-user credentials: exchange API keys, Telegram bot token, Discord webhook, Twilio WhatsApp credentials
• Browser push subscription endpoints when you enable web push
• Android device tokens (FCM) when you enable app push in the mobile app
• Billing/order records for packages you purchase or activate, including on-chain credit / vault-pay checkout status when those methods are used
• Contact messages you send through the Contact form
• Optional KYC fields or files you submit for verification

What we never store

• Wallet seed phrases or private keys (signing stays on your browser or Android device)
• Secure Vault Keys, recovery keys, .tnrec / Google Drive backup passphrases, or decryptable vault ciphertext — optional Drive backups stay in your Google account as ciphertext you created on device
• Exchange withdraw permissions — you control API key scopes; keep withdraw disabled

Payments & processors

Paid packages may be processed via card (e.g. Stripe), crypto payment providers (e.g. NOWPayments), or direct crypto to wallets shown at checkout — depending on what Admin has enabled. Processors receive the billing details needed to complete payment (such as email, amount, and payment status). We store order/package status in your account; we do not store full card numbers on Trad Nora servers.

Alerts & messaging

Price alerts and digests may be delivered by email, Telegram, Discord, WhatsApp (Twilio), browser push, and/or Android push (Firebase Cloud Messaging), according to your settings and package. Those channels process delivery metadata (destination address, chat ID, webhook URL, or device token) only to send messages you requested.

Cookies & local storage

Trad Nora uses essential cookies and similar storage for login sessions, CSRF protection, and preferences such as theme. Optional marketing analytics (Google Analytics, Meta Pixel, and/or Google Tag Manager) may load on the public site when an Admin enables them under Branding. See the Cookie Policy.

Android APK downloads

When an Android build is published, the APK file and a public version label may be stored on our servers so visitors can download from /apps. Download requests may be logged for abuse prevention (for example IP and time).

How we use data

We use your data to provide the product: sync markets, evaluate alerts, process subscriptions, deliver notifications you enable, and support your account. We do not sell customer trading data.

Who can access

You access your own data. Platform Admin/Support may access records for support, billing, and abuse prevention.

Retention & requests

Account data is kept while your account is active. You may request account deletion or a copy of your account data via the Contact page. Some records may be retained where required for security, billing, fraud prevention, or legal obligations.

Contact

Privacy questions: use the Contact page (or the support email shown in Site settings when configured).