Privacy Policy

VATREX ("we", "our", or "the Service") is a trading journal and analytics platform built for funded traders. This Privacy Policy explains what data we collect, why we collect it, and how we protect it. We do not sell your data to third parties — full stop.

We collect only what is necessary to operate the Service:

• Account information — email address and password (hashed, never stored in plain text).
• Trade journal data — pairs, direction, result, R:R, P/L, session, strategy, confluences, screenshots, and any notes you enter.
• Capital account data — account names, sizes, and balances you configure.
• Usage data — page visits and feature interactions, used only to improve the product.

We do not collect financial account credentials, broker logins, or any data beyond what you explicitly enter into VATREX.

Your data is used exclusively to:

• Display your journal, analytics, and capital management dashboards back to you.
• Generate AI-powered insights and diagnostics on your trading behavior.
• Calculate performance metrics, drawdown, and risk statistics.
• Send transactional emails (password resets, account notifications).

We never use your trade data for advertising, profiling for third parties, or any purpose outside of providing the Service to you.

All user data is stored in Supabase, a secure, SOC 2 Type II-compliant database platform hosted on AWS infrastructure. Your data is encrypted in transit (TLS) and at rest.

Authentication is handled entirely by Supabase Auth. Passwords are hashed using bcrypt and never accessible to VATREX staff.

Trade screenshots are stored in Supabase Storage, in a private bucket scoped to your user account.

VATREX uses a session cookie to keep you authenticated. This cookie is set by Supabase Auth and is strictly necessary for the Service to function. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

The following third-party services are used to operate VATREX:

• Supabase — database, authentication, and file storage.
• Vercel — hosting and deployment of the web application.
• Anthropic Claude API — powers AI Insights features. Trade data sent to the Claude API is processed to generate insights and is not retained or used for model training by Anthropic (per their API data usage policy).

No other third-party services have access to your data.

You have the right to:

• Access — request a full export of your data at any time.
• Correction — update or correct any data you have entered.
• Deletion — request complete deletion of your account and all associated data.
• Portability — export your trade journal data in CSV format at any time from within the app.

To exercise any of these rights, contact us at the address below. We will respond within 7 business days.

Questions about this Privacy Policy? Reach us at shaddoud@vatrexai.com.