Privacy Policy

Last updated: 2026-07-19. This policy describes how TRADE ORBITAL processes your personal data, in accordance with the GDPR.

1. Data controller

[Legal entity — to be completed], contact: contact@trade-orbital.com.

2. Data we collect

Account data: email, name, hashed password, optional avatar, preferences (language, timezone, currency).

Usage data you enter: portfolios, trades, sessions, journal notes — used solely to provide the Service.

Technical data: session cookies (authentication only, no advertising cookies), IP address and browser of active sessions (security).

Billing data: processed by Stripe (we never see your card number).

3. Purposes & legal bases

Providing the Service (contract); account security and fraud prevention (legitimate interest); billing (legal obligation and contract); transactional emails — verification, password reset (contract).

4. Processors

Railway (hosting, USA — standard contractual clauses), Stripe (payments), Resend (email delivery), Hostinger (domain). Your data is never sold or shared for advertising.

5. Retention

Data is kept while your account is active. Account deletion permanently erases your trading data; billing records are kept as required by accounting law.

6. Your rights

Access, rectification, erasure, portability (built-in CSV export under Settings → Data), restriction and objection: write to contact@trade-orbital.com. You may also lodge a complaint with your supervisory authority (CNIL in France).