Privacy Policy

Composure (“we”, “us”, or “our”) is committed to protecting your privacy. This Policy explains what information we collect, how we use it, and how we keep it safe.

By using Composure, you agree to the practices described in this Policy. If you have questions, contact us at support@composure.trading.

Account information: Email address and password (or OAuth identity via Google) when you register.

Profile and preferences: Display name, trader personality, instrument preferences, risk settings, and watchlist — entered by you during onboarding and settings.

Trade journal data: All trade entries you create, including instrument, direction, prices, size, timing, emotions, notes, tags, screenshots, and AI-generated scores or reports.

Billing information: Subscription plan and billing status. Payment details (card number, etc.) are handled directly by Paddle and are never stored on our servers.

Notification settings: Telegram Chat ID if you set up Telegram alerts. Email address for transactional emails.

Usage data: Log data such as IP address, browser type, and pages visited — collected automatically by our infrastructure for security and debugging purposes.

• To provide, operate, and improve the Service
• To authenticate you and maintain your session
• To send transactional emails (welcome, weekly reports, trial expiry reminders)
• To send Telegram notifications when you have opted in
• To generate AI trade scores and weekly reports when you explicitly request them
• To process subscription payments through Paddle
• To respond to support inquiries
• To detect, investigate, and prevent security incidents

We do not use your trade data for advertising or to train public AI models.

We share data with the following third-party services strictly to operate the Service:

• Supabase — database and authentication infrastructure (EU/US data centres)
• Paddle — payment processing (your card details go directly to Paddle, never to us)
• AI analysis service — AI analysis of your trade data, triggered only by your explicit action
• Resend — transactional email delivery
• Telegram — push notifications when you configure a Chat ID
• Vercel — application hosting and edge functions
• Sentry — error monitoring (anonymised stack traces only)

We do not sell, rent, or share your personal data with any other third parties.

When you trigger an AI feature (trade score or weekly report), the relevant trade fields are sent to our AI analysis service for processing. We send only the minimum data required: instrument, direction, prices, timing, emotion tags, notes, and self-scores.

We do not send screenshots or personally identifiable information (name, email) to the AI service.

All data is encrypted in transit (TLS) and at rest. Journal entries are protected by row-level security — only your account can read your trade data. We do not have a social feed and no user can see another user's journal.

Despite these measures, no system is 100% secure. Please use a strong password and enable two-factor authentication where available.

We retain your account and trade data as long as your account is active. If you delete your account, we will permanently remove your data within 12 months. Data required for legal or accounting obligations (billing records) may be retained for up to 7 years.

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Export your trade journal data (available on paid plans)
• Withdraw consent for optional communications (unsubscribe links are included in all marketing emails)

To exercise any of these rights, email us at support@composure.trading.

We use strictly necessary session cookies for authentication. We do not use advertising cookies or third-party tracking cookies. Analytics are collected at the infrastructure level (anonymised) with no cross-site tracking.

The Service is not directed at anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service. The “Effective date” above will be updated accordingly.

For privacy-related questions or requests, contact us at support@composure.trading.