Privacy Policy

This Privacy Policy describes how Tradomix ("we", "our", "us") collects, uses, and safeguards information when you use tradomix.com (the "Service"). By using the Service you agree to this policy.

1. Who we are

Tradomix is operated as a sole proprietorship based in Switzerland. The Service provides AI-generated trade signal analyses based on chart images uploaded by the user. The operator can be reached at support@tradomix.com.

2. Data we collect

Account data

• Email address (provided at signup)
• Encrypted password hash (we never store your password in plain text)
• Account creation timestamp

Subscription data

• Plan tier (Essential, Pro, Elite, or Day Pass)
• Subscription period start/end dates
• Stripe customer ID and subscription ID (for billing)
• Number of analyses performed in the current period

Payment card details are never stored on our servers. They are handled exclusively by Stripe, which is PCI-DSS Level 1 compliant.

Analysis data

• Chart images you upload (transmitted to Anthropic's Claude API for analysis, then discarded — see Retention below)
• The optional asset name, timeframe, and strategy style hints you provide
• The AI-generated signal output (stored in your account so you can review past analyses)
• Timestamp of each analysis

Technical data

• IP address and standard server logs (handled by Cloudflare for DDoS and bot protection)
• Browser type and basic device info (collected automatically by your browser)

3. How we use your data

• To provide the Service (run the AI analysis on your charts)
• To authenticate you and maintain your session
• To process payments via Stripe
• To enforce per-plan analysis quotas
• To respond to support requests you send us
• To investigate abuse, fraud, or violations of our Terms of Service

We do not sell your data, share it for advertising, or use it for any purpose unrelated to the Service.

4. Third-party processors

To run the Service we share specific data with the following processors:

• Anthropic (USA) — receives your chart images and prompts for AI analysis. Anthropic does not retain inputs for training. Anthropic Privacy Policy.
• Stripe (USA) — processes payments, stores card details, manages subscriptions and billing portal access. Stripe Privacy Policy.
• Cloudflare (USA) — hosts the Service, the database, and the Worker that runs the AI pipeline. Provides DDoS and bot protection at the network edge. Cloudflare Privacy Policy.

5. Data retention

• Chart images: sent to Anthropic for analysis and not stored long-term by Tradomix beyond the duration of the API call.
• Analysis results (text): stored in your account so you can review past signals. Deleted when your account is deleted.
• Account data: kept for as long as your account exists. Deleted permanently within 30 days of account deletion request.
• Billing records: retained by Stripe for as long as required by Swiss accounting law (currently 10 years).

6. Your rights

If you are in the EU, UK, Switzerland, or another jurisdiction with applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Export your data in a portable format
• Object to certain processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email support@tradomix.com. We respond within 30 days.

7. Cookies and local storage

We use the following minimal browser storage:

• localStorage — stores your authentication token after sign-in so you don't have to log in on every visit.
• No third-party advertising cookies.
• No tracking pixels.
• Cloudflare may set strictly necessary cookies for security and bot protection.

8. Security

Passwords are hashed with PBKDF2 (100,000 iterations, SHA-256). Sessions use signed JWTs. All traffic uses HTTPS/TLS 1.3. The database is hosted on Cloudflare D1 with at-rest encryption. We rotate API keys regularly and follow secure-by-default practices.

That said, no online service is perfectly secure. If you discover a vulnerability, please report it responsibly to support@tradomix.com.

9. Children

The Service is not intended for users under 18. If you become aware that a minor has created an account, please contact us so we can delete it.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be announced via email to your registered address at least 7 days before they take effect. Continued use of the Service after changes take effect constitutes acceptance.

11. Contact

For any privacy-related questions or requests: support@tradomix.com