Privacy Notice

Who we are

TMA TRADING LLC ("TMA") operates this platform and is the data controller for the personal data described below. Contact: our support contact listed on this site.

What we collect and why

• Account data (name, email, password credentials, profile preferences) — to create and secure your account and provide the service. Legal basis: performance of a contract.
• Content you create (journal trades, notes, trading plans, course progress, quiz attempts) — to deliver the features you use. Legal basis: performance of a contract.
• Support messages — to answer your requests. Legal basis: legitimate interests.
• Usage and device data (log records, IP address, browser and device identifiers) — for security, fraud prevention, reliability and product improvement. Legal basis: legitimate interests.
• Marketing preferences — only where you have opted in. Legal basis: consent, which you may withdraw at any time.

Who we share data with

• Service providers and subprocessors: hosting, database, email and analytics tooling.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, payments, subscription management, invoicing and tax compliance.
• Professional advisers such as legal and accounting providers.
• Authorities, where required by law.

We do not sell your personal data, and your journal data is never shared with other members.

Retention

We keep account and content data while your account is active and for up to 12 months after closure, unless a longer period is required by law (for example accounting records). After that it is deleted or anonymised.

Your rights

Subject to the law in your country, you may request access, correction, deletion, restriction, portability, or object to certain processing, and withdraw consent. Where GDPR applies you may also complain to your supervisory authority; we respond within one month. Email our support contact listed on this site to exercise a right.

International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses.

Security and cookies

We use appropriate technical and organisational measures including encryption in transit, access controls and row-level database isolation. We use essential cookies and local storage to keep you signed in and to remember preferences; we do not use advertising cookies. You can clear or block them in your browser, though sign-in will stop working.