Privacy
What TradeLens AI stores, what leaves the app, and what you can do about it. This describes the product as it actually works today, including the parts that are not finished.
What TradeLens is
TradeLens AI is a post-trade journal. You record trades you have already taken, and the app helps you review them. It has no connection to any broker or exchange: it cannot see your accounts, cannot place orders, and has no access to your money.
What we collect
Your account
Your email address, full name, date of birth, how you heard about TradeLens, an internal username, and a bcrypt hash of your password. We never store your password itself.
We do not collect your phone number, postal address, payment details, or any broker credential. New accounts require a verified email address; older beta accounts may not have one.
Your email address is used to verify the account, let you sign in, and for resetting your password. It is not sold or used for marketing. An older account without a verified address cannot use email password recovery.
What you write in the journal
Everything you enter about a trade: date, session, instrument, direction, timeframe, entry, stop, take-profit and exit prices, position size, risk, profit and loss, setup and strategy labels, and the SMC/ICT annotations.
It also includes what you write about yourself: how you felt before, during, and after a trade, your notes, your process notes, the mistakes you tag, and whether you followed your own rules. This is the most personal content in the product, and it is treated as such.
Your Strategy Profile (your entry, stop, take-profit and risk rules) is stored with your account and visible only to it.
Chart screenshots
Images you upload are stored on the application's own file storage and linked to the trade they belong to.
What is sent to the AI provider
TradeLens uses Anthropic as its only AI provider. Nothing is sent to any other third party for processing.
- Chart review and autofill: the screenshot you uploaded, plus your Strategy Profile if you have one.
- Trade review: that trade's fields and your written notes, plus your Strategy Profile.
- Weekly recap: the week's trades, the statistics computed from them, and your Strategy Profile.
Your username and password hash are never included in anything sent to Anthropic. Your written psychology notes are included when they are part of the trade being reviewed. That is what allows the review to discuss them.
AI calls happen when you upload a screenshot, ask for a review, or open a weekly recap. They do not happen in the background.
What we keep for our own records
We log which AI feature ran, which model, how many tokens it used, and what it cost. These records contain no prompt content and no journal text.
Generated reviews and analyses are stored against your account so they can be shown again without paying to regenerate them.
This website
The public marketing pages use Vercel Web Analytics, which records aggregate page views plus two events: which call-to-action was clicked, and which FAQ question was opened. Neither event carries account details.
After you sign in, the website sets a secure, HttpOnly session cookie so authenticated pages can recognise you. The cookie contains a random credential, not your name, email address, or journal data.
Fonts are loaded from Google Fonts and Fontshare, so those services receive your IP address as a consequence of your browser requesting the files.
What you can do
- Export. Download all your trades as CSV from Settings, at any time.
- Correct. Edit or delete any individual trade from the Journal.
- Delete everything. Settings → Danger Zone → Delete my account permanently removes your account, every trade and note, your Strategy Profile, your saved reviews and AI analyses, your settings, and every screenshot you uploaded.
One thing survives account deletion: the cost records described above, with the link to your account removed. They record that an AI call happened and what it cost, and after deletion they cannot be connected to you or to any trade. We keep them for accounting.
Deletion is immediate and permanent. There is no undo and no backup to restore from, so export first if you want to keep your journal.
How long we keep things
Until you delete them. There is no automatic expiry.
Beta limitations, stated plainly
TradeLens is in private beta and hosted on infrastructure chosen for iteration speed, not durability. You should know:
- There are no backups. If the hosting environment loses data, it is gone, and we cannot restore it.
- Uploaded screenshots are stored on a filesystem that does not persist across redeployments on the current host. Treat the screenshots in TradeLens as copies, not as your only copy.
- Password reset requires an email address on your account and working outgoing mail. If either is missing, we cannot get you back in.
Export regularly. This is the honest advice, not a disclaimer.
Security
Passwords are hashed with bcrypt and never stored or logged in readable form. Website sessions use random, expiring, revocable credentials stored in secure HttpOnly cookies; only credential hashes are stored in the database.
Opening the journal uses a separate, single-use link that expires after two minutes. During the current beta, the journal's own random session credential is carried in its URL, can last up to 12 hours, and should not be copied or shared. It is stored only as a hash and is revoked when you sign out of that journal session.
Every journal record is scoped to the account that owns it.
We are a small beta product. We have not undergone an external security audit, and we do not claim to have.
Contact
Questions about any of this, or a request we have not built a button for: support@tradelensai.io.
Changes
If this changes materially, the date at the top changes and beta users are told directly.