Legal

Privacy Policy

Last updated: February 2026

1. Information We Collect

When you use TBTY (tradebty.com), we collect the following information:

  • Account information: Your name and email address, provided when you sign in with Google OAuth or a magic link.
  • Early access signup information: Email, first name, timezone, and trading interests submitted through our signup form.
  • Trading review data: Session reviews, conditional rules, playbook entries, and related content you create within the app.
  • Payment information: Processed securely by Stripe. We do not store credit card numbers. We retain your Stripe customer ID and subscription status.
  • Usage data: Basic server logs including IP addresses for rate limiting and security purposes.

2. How We Use Your Information

  • To provide and maintain the TBTY service
  • To process payments through Stripe
  • To send transactional emails (sign-in links, Quick Start Guide)
  • To send the weekly digest email (opt-out available)
  • To enforce rate limits and prevent abuse

We do not sell your personal information. We do not use your trading review data for any purpose other than providing the service to you.

3. Cookies and Sessions

We use a single session cookie to keep you signed in. This cookie contains a signed token with your user ID and an expiration timestamp. We do not use third-party tracking cookies or analytics trackers.

4. Voice Review & AI Processing

TBTY offers a voice-first review mode. When you use this feature:

  • Audio upload: Your voice recording is uploaded to our server and sent to Deepgram for speech-to-text transcription.
  • AI extraction: The resulting transcript is sent to Anthropic Claude for structured extraction of trades, rules, emotions, and key takeaways into your review fields.
  • Audio deletion: Your audio recording is deleted immediately after transcription is complete. We do not store audio files permanently.
  • What AI services receive: Deepgram receives the audio recording for transcription only. Anthropic receives the transcript text for structured data extraction only. Neither service receives your identity, account information, or trading performance data.

The extracted review content (text fields, not audio) is stored as part of your trading review data and subject to the retention policy described in Section 7.

5. Third-Party Services & Data Processors

  • Google OAuth: Used for authentication. We receive your name, email, and profile picture from Google when you sign in.
  • Stripe: Handles all payment processing. Subject to the Stripe Privacy Policy.
  • Deepgram: Processes voice recordings for speech-to-text transcription. Audio is transmitted securely and not retained by Deepgram after processing.
  • Anthropic: Processes transcript text through Claude for structured data extraction. Text is transmitted securely and not retained by Anthropic for training purposes.
  • Resend: Used to send transactional and digest emails on our behalf.
  • MongoDB Atlas: Our database provider, hosted in the cloud with encryption at rest.
  • Vercel: Our hosting provider. Subject to the Vercel Privacy Policy.

6. Email Communications

We send the following types of email:

  • Sign-in magic links (transactional, cannot be opted out)
  • Quick Start Guide on early-access signup (one-time)
  • Weekly digest summarizing your trading reviews (opt-out via account settings or one-click unsubscribe)

7. Data Retention

Your account data and trading reviews are retained for as long as your account is active. If you cancel your subscription, your data is retained so you can access it if you resubscribe. You can request deletion of your account and all associated data through the feedback form in your account settings.

8. Data Security

We implement security measures including HTTPS encryption, CSRF protection on all mutating endpoints, rate limiting, signed session tokens with HMAC-SHA256, and timing-safe comparisons to prevent timing attacks.

9. Your Rights

You have the right to access, correct, or delete your personal data. You can update your email preferences from the billing page, or submit account-level requests through the feedback form in your account settings.

10. Contact

For privacy-related questions or data requests, reach out through the feedback form in your account settings, or visit tradebty.com and use the contact option available on the site.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance.