Privacy Policy

1. Who we are

Trading Journal is operated by Lunde Invest AS ("we", "us"), org. no. 819 991 782, Haugesund, Norway. We are the data controller for personal data processed in Trading Journal. Contact: kontakt@lundalfinans.com.

2. What we collect

• Account data — email address, name (optional) and a hashed password, or your Google sign-in identity.
• Trade data you add — trades you log, import via CSV or sync from a platform you connect: instrument, direction, size, prices, times, fees, P&L, and the notes, tags, screenshots and voice notes you attach.
• Broker connection tokens — if you connect a platform, we store the read-only access token or API key you authorise, encrypted. We never receive or store your platform password.
• Payment data — handled by Stripe. We store your subscription status and Stripe references, never card numbers.
• Usage data — basic technical logs (IP, browser, pages) to keep the service secure and working.

3. What we use it for

• Providing the journal: dashboards, statistics, calendars, reports, prop-rule guardrails (contract — GDPR art. 6(1)(b)).
• AI features you actively use (AI coach, insights, chart reviews) process your own trade data to generate feedback. Output is shown to you only (contract).
• Emails: receipts, account notices and — if you opted in — product updates. Unsubscribe any time (consent / legitimate interest, art. 6(1)(a)/(f)).
• Security, abuse prevention and legal obligations (bookkeeping) (legitimate interest / legal obligation, art. 6(1)(c)/(f)).

We never sell your data. We never share your trade data with other users, brokers or prop firms.

4. Processors and transfers

We use vetted processors under data-processing agreements: Vercel (hosting), Neon (database), Stripe (payments), Resend (email) and AI inference providers for the AI features. Some processors operate in the United States; transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

5. Retention and deletion

Your data is kept while your account is active. You can delete your account and all data yourself in the app at any time — deletion is permanent and completed within 30 days, except records we must keep under bookkeeping law. Broker tokens are deleted immediately when you disconnect a platform.

6. Your rights

Under the GDPR you can access, correct, export and delete your data, object to or restrict processing, and withdraw consent. Use the in-app tools or email kontakt@lundalfinans.com — we respond within 30 days. You can complain to Datatilsynet (the Norwegian Data Protection Authority) at datatilsynet.no.

7. Cookies

The app uses strictly necessary cookies for login and language. Marketing pages may use analytics/advertising pixels; these are not used inside the journal itself.

8. Changes

We will announce material changes to this policy in the app or by email. Last updated: July 30, 2026.