Privacy Policy
Effective date: 14 August 2026
This Privacy Policy explains how the ProfitLab Journal brand collects and uses personal data when you visit the website, purchase access, create an account or use the trading journal.
1. Information we collect
- Account data: email address, authentication identifiers and account status.
- Journal data: trades, balances, notes, setups, risk settings, psychology entries, performance information and preferences you choose to save.
- Purchase and access data: customer email, product entitlement, transaction identifiers, payment status, amount and currency. Complete card details are processed by Paddle and are not stored by ProfitLab Journal.
- Technical data: basic device, browser, security and diagnostic information generated when the service is accessed.
- Support data: information contained in messages you send to us.
2. How we use information
We use information to create and secure accounts, synchronize journal data across devices, verify purchases, provide product access, send essential authentication emails, respond to support requests, prevent fraud, diagnose errors and comply with legal obligations.
3. Legal bases
Where applicable, processing is based on performance of our contract with you, legitimate interests in operating and securing the service, compliance with legal obligations and consent where consent is specifically requested. Mandatory consumer and privacy rights remain unaffected.
4. Service providers
We use trusted providers to operate the service: Supabase for authentication, database and synchronization; Cloudflare for hosting, security and content delivery; Brevo for transactional email; and Paddle as Merchant of Record for checkout, payments, taxes and buyer administration. We may also load technical libraries, fonts or interface assets from established content-delivery providers. Each provider processes data under its own applicable terms and privacy commitments.
5. Cookies and local storage
ProfitLab Journal uses essential browser storage and authentication technologies to keep you signed in, preserve settings, support offline resilience and synchronize the latest journal state. We do not currently use this data for third-party advertising. Blocking essential storage may prevent login or normal product operation.
6. Retention
Account and journal data is retained while your account is active and as reasonably required to provide the product, resolve disputes, prevent fraud and meet legal obligations. Payment records may be retained by Paddle as required by tax and financial law. You may request deletion subject to necessary legal retention.
7. International processing
Our providers may process data in different countries. Where required, they use recognized safeguards for international transfers. Using the service from outside the provider’s processing region may involve transferring data internationally.
8. Security
We use account authentication, database access controls, encrypted connections and restricted server credentials designed to protect personal data. No online system can guarantee absolute security. Keep your password private and contact us promptly if you suspect unauthorized access.
9. Your choices and rights
Depending on applicable law, you may request access, correction, export, restriction or deletion of personal data, or object to certain processing. You may also sign out, export supported journal data and change your password. We may need to verify your identity before completing a request.
10. Children
The service is not intended for children under 18, and we do not knowingly create accounts for them.
11. Changes
We may update this policy as the product or legal requirements change. The effective date shown above will be revised when material updates are published.
12. Contact
For privacy questions or requests, email tnhprofit8@gmail.com.