TraderPulse

Privacy Policy

Last updated: May 1, 2026

1. Introduction

TraderPulse (“we”, “our”, or “the Platform”) respects your privacy and is committed to protecting the personal data you share with us. This policy explains what information we collect, how we use it, who we share it with, and the rights you have over your information.

TraderPulse is operated by Michael Velazquez from Puerto Rico, United States. If you have questions about this policy, contact us at legal@veldevpr.com.

2. Information we collect

2.1 Information you provide directly

  • Account data: email, name, password (hashed with bcrypt), optional avatar.
  • Trading data: trades, sessions, journal entries, screenshots, broker accounts (name, balance — without sensitive credentials unless you explicitly connect them).
  • Psychological data: emotional check-ins, mental capital logs, gratitude entries, detected tilt events.
  • Business data: income, expenses, subscriptions, tax configuration.
  • Integration credentials (optional): Anthropic API keys, broker credentials. Stored encrypted.

2.2 Information collected automatically

  • Session cookies: required to keep your session active (NextAuth).
  • Usage data: visited routes, errors, performance metrics (Vercel Analytics, Vercel Speed Insights).
  • Device information: browser type, operating system, IP (server logs).

2.3 Third-party information

If you connect external integrations (Stripe for payments, brokers via API), we receive information from those services according to the permissions you approve.

3. How we use your information

  • Provide and maintain the Platform.
  • Generate analytics, insights, and reports from your own data.
  • Process payments through Stripe (when enabled).
  • Send transactional emails (welcome, password reset, receipts, optional summaries).
  • Detect and prevent fraud or abuse.
  • Comply with legal obligations.

We never sell your information to third parties. We never use your trading data to train our own AI models. Data sent to the Claude API (when you enable AI features) is sent only at your explicit request.

4. Who we share information with

  • Service providers: Vercel (hosting), Neon (database), Anthropic (Claude API if you enable AI), Stripe (payments when enabled), Resend or equivalent (email).
  • Legal compliance: if we receive a valid court order.
  • Business transfer: if TraderPulse is acquired or merged, your data may be transferred to the successor (we will notify you).

5. Data retention

We retain your information while your account is active. If you delete your account, we permanently erase your data within 30 days, unless the law requires us to retain it for longer (for example, tax records). Backups may be retained for up to 90 additional days.

6. Security

  • HTTPS/TLS connections throughout the Platform.
  • Passwords hashed with bcrypt.
  • API keys encrypted at rest (AES-256, planned).
  • Optional two-factor authentication (2FA) (planned).
  • Database access restricted by IP allowlist.
  • Audit logs of sensitive actions.

Although we take reasonable measures, no system is 100% impenetrable. We recommend using a strong, unique password, and enabling 2FA when available.

7. Your rights

Depending on your jurisdiction (GDPR, CCPA, etc.), you have the right to:

  • Access: download all your data in JSON format from Settings → Admin → Backup.
  • Rectification: edit your data at any time.
  • Deletion: delete your account from Settings (right to be forgotten).
  • Portability: the JSON backup is an open format that you can import into another system.
  • Objection and limitation: contact us at legal@veldevpr.com.
  • Withdraw consent: disable AI integrations at any time.

8. International transfers

Your data may be processed in the United States, the European Union, or wherever our providers are located (Vercel, Neon, Anthropic). By using TraderPulse, you consent to this transfer.

9. Minors

TraderPulse is not directed at users under 18 years of age. We do not knowingly collect data from minors. If you discover that a minor has created an account, contact us to remove it.

10. Changes to this policy

We may update this policy periodically. Significant changes will be notified by email with at least 30 days of advance notice. The current version is always published at this URL.

11. Contact

To exercise your rights or ask questions: legal@veldevpr.com.

12. Controller details