Privacy Policy

1. Who we are

TradeCut(“we”, “us”, “our”) operates the TradeCut desktop app (macOS and Windows) and the trade-cut.com website (together, the “Service”) for customers worldwide. If you have questions about this policy or your data, contact us at support@trade-cut.com.

2. What TradeCut records on your device

TradeCut’s core function is screen recording: while a recording session is active, the app captures your screen continuously. Camera (facecam) and microphone (narration) capture are optional — they are only recorded if you explicitly select a camera or enable microphone input for that session.

All recordings and the local database that indexes your clips are stored only on your own computer — on macOS under ~/Library/Application Support/TradeCut/, on Windows under %APPDATA%\TradeCut\. Clips you export by default are written to ~/Movies/TradeCut on macOS and Videos\TradeCut on Windows. None of this leaves your device unless you sign in and sync, as described below.

3. What we receive in the cloud (only if you sign in and sync)

If you sign in to a TradeCut account and your account is entitled to cloud sync, exporting or syncing a clip sends:

• The exported clip video and its thumbnail, stored in our cloud storage. Object paths are namespaced using a one-way SHA-256 hash of your account email — the hash is derived from your email but is not itself anonymized or unlinkable data, since we control the mapping.
• Clip and session metadata — symbol, direction, entry/exit price, outcome, profit/loss, timestamps, and duration — plus your synced app settings, stored in our database and keyed to your account email.

If you are not signed in, or your account is not entitled to cloud sync, nothing about your recordings or trades leaves your computer.

4. Account data

When you create an account we store your email address, a salted hash of your password (we never store your password in plain text), and your plan and trial status. For paid subscriptions, our payment processor collects and stores your billing details (such as your billing name and a tokenized payment method) — we do not store your full card number ourselves.

5. How we use it

We use this data to provide the Service: operate your account and billing, store and display your synced clips, send transactional email, and secure, debug, and improve the Service. We do not sell your data. We rely on a small number of trusted service providers (for hosting, storage, email delivery, and payment processing) that process data only as needed to operate the Service on our behalf. We also use one third-party advertising network, Meta, on our marketing pages — see Advertising & the Meta Pixel below.

6. We do not pass your details to third parties

TradeCut does not sell, rent, trade, or otherwise pass your personal details to any third party for their own purposes. We do not share your email address, your name, or your account details with advertisers, data brokers, list resellers, or anyone else who would use them to market to you.

The only parties who ever touch your data are the service providers we need in order to run the Service at all. They act strictly on our instructions, may use the data only to perform the service they provide to us, and may not use it for their own purposes:

• Hyp Pay — payment processing (billing details; we never see or store your full card number).
• Vercel and Neon — website hosting and the account database.
• Cloudflare R2 — private storage for clips you choose to sync. The bucket is not public and clips are only reachable through short-lived links issued to your own signed-in session.
• Resend — delivery of transactional and, if you opted in, marketing email.
• Meta — advertising measurement on our marketing pages only, and only with your consent. What is sent is limited and described in §9; it never includes your raw email address.
• PostHog — product analytics and session replay on this website, and only with your consent. See §10 for what it records.

Beyond these providers, we disclose personal data only where the law requires it — a binding court order, a lawful request from a competent authority, or to establish or defend a legal claim. If TradeCut is ever involved in a merger, acquisition, or sale of assets, we will notify you before your data becomes subject to a different privacy policy, and you will have the opportunity to delete your account first.

7. Legal basis for processing (EEA, UK & Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR / UK GDPR to process your personal data:

• Contract — to create and operate your account, provide cloud sync, and process subscription payments.
• Legitimate interests — to secure, debug, and improve the Service, and to maintain our first-party analytics log, where this does not override your fundamental rights and freedoms.
• Consent — for the Meta Pixel and any other non-essential cookies, which stay off until you accept the cookie banner.
• Legal obligation — where we must retain or disclose data to comply with the law.

You can withdraw consent at any time by declining or resetting the cookie banner; this does not affect the lawfulness of processing carried out before withdrawal.

8. Analytics & session replay

We keep a first-party event log — for example page views, sign-ups, and clicks — in our own systems, to understand how the Service is used. Some events may include your email address where you provided it (for example, when signing up). We do not use Google Analytics or Google Tag Manager.

PostHog. With your consent, this website also sends those same events to PostHog, a product-analytics provider, which processes them on our behalf and stores them on EU servers. This tells us which steps of sign-up, onboarding, and checkout people complete or abandon.

Session replay. PostHog also records a reconstruction of your visit to this website — the pages you open, where you move and click, and how you scroll — so we can see where the Service confuses people. This applies to this website only. It is not part of the desktop app, and it cannot see your screen, your other tabs, or any other application.

What a replay deliberately excludes:

• Everything you type. All form fields are masked before the recording leaves your browser — including your email address, password, and any payment or coupon field. We receive asterisks, not characters.
• Your clip media. Clip thumbnails and video players are blanked out in the recording. A replay of your dashboard shows the layout and your interactions with it, never the frames of your own screen that TradeCut captured.

Replay is recorded on the sign-up, onboarding, and checkout pages, plus a small random sample of other visits. It follows exactly the same consent rules as the Meta Pixel described in §9: in the EEA, the UK, and Switzerland nothing is recorded unless you accept; elsewhere you can decline at any time from the cookie banner, and declining stops an in-progress recording immediately. Recordings are retained by PostHog for a maximum of 30 days and are then deleted.

9. Advertising & the Meta Pixel

Our public marketing pages load the Meta Pixel, an advertising and analytics tool provided by Meta Platforms (Facebook and Instagram). A cookie banner is shown on your first visit. If you are in the European Economic Area, the United Kingdom, or Switzerland, the Pixel stays off unless you accept. Elsewhere, the Pixel runs by default and you can decline in the banner to turn it off. Your choice is remembered in your browser.

The Pixel sets cookies and sends information to Meta about your visit — including the page you viewed, your IP address, your browser and device, and your interactions with our pages. Meta may use this to measure our ads, to build audiences, and to show you our ads on Facebook and Instagram. Meta acts as an independent controller of that data under its own privacy policy, which governs what it does with it. Depending on Meta’s own settings, the Pixel may also send details you enter in forms on those pages, such as your email address, so that Meta can match your activity to its users.

Server-side conversion reporting.In addition to the browser Pixel, we send Meta a server-side record of key conversion events — creating an account, starting a trial, downloading the desktop app, and purchasing a subscription — using Meta’s Conversions API. These reports include the event, its value where relevant (for example the amount of a subscription purchase), and a one-way cryptographic hash of your email address, which lets Meta match the event to an account of its own without ever receiving your actual email address. Server-side reporting follows the same consent rules as the Pixel: if you decline non-essential cookies, no server-side conversion events are sent about you either.

The Pixel runs only on our public marketing pages. It is not part of the desktop app and has no access to what TradeCut records on your computer.

Beyond the cookie banner, you can also block the Pixel with your browser’s tracking protection or an ad blocker, or through your Meta ad preferences. Blocking it does not affect your ability to use the Service, join the waitlist, or hold an account.

10. Retention & deletion

Automatic cloud deletion. Clips synced to your TradeCut cloud library are automatically and permanently deleted 60 days after they were synced. This happens on a rolling basis — each clip is deleted 60 days after its own upload, regardless of your plan or subscription status — and the deletion covers the video file, its thumbnail, and the associated database record. Deleted clips cannot be recovered by you or by us. If you want to keep a clip beyond 60 days, export or download it before then; the app and your dashboard show how long each clip has left.

Local recordings on your own computer are not affected by the 60-day rule and follow the retention setting you configure in the app. When you delete a clip or session in the app, we also remove the corresponding cloud video, thumbnail, and database rows on a best-effort basis, with automatic retry on failure. You can request deletion of your account and associated data at any time by contacting support@trade-cut.com.

11. Security

We use industry-standard measures to keep your data secure, including encrypted storage of credentials, hashed passwords, and per-account access controls so that one user cannot access another user’s data. No system is completely secure, but we take reasonable steps to protect your information.

12. Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing support@trade-cut.com.

If you are in the European Economic Area, the United Kingdom, or Switzerland, the GDPR / UK GDPR also gives you the right to restrict or object to our processing, to receive your data in a portable format, and to lodge a complaint with your local data protection supervisory authority. California residents have the additional rights described in §14 below. To exercise any of these rights, contact us at the email above.

13. International data transfers

TradeCut serves customers worldwide, and our hosting, database, and storage providers operate infrastructure across multiple countries, including the United States. Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland to a country that lacks an adequacy decision, we rely on appropriate safeguards — such as Standard Contractual Clauses — with the service providers involved. Contact us at the email above for more detail on the safeguards that apply to your data.

14. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose, and the categories and sources of that information.
• Delete personal information we hold about you, subject to certain exceptions.
• Correct inaccurate personal information.
• Opt outof the “sale” or “sharing” of your personal information. We do not sell personal information for money. Our use of the Meta Pixel on marketing pages may count as “sharing” for cross-context behavioral advertising under California law — you can opt out at any time by declining the Pixel in the cookie banner, or through your browser’s tracking protection.
• Non-discrimination for exercising any of these rights.

The categories of personal information we collect are described throughout this policy: identifiers (email, account credentials), commercial information (plan, trial, and billing status), internet or network activity (analytics events, Pixel data), and audio/visual information (your recordings, if cloud sync is enabled).

To exercise any of these rights, or to designate an authorized agent to do so on your behalf, contact us at support@trade-cut.com. We may need to verify your identity before completing your request.

15. Children

The Service is intended for adults aged 18 and over and is not directed at, or knowingly offered to, children.

16. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent version.

17. Contact

Questions about this policy or your data can be sent to support@trade-cut.com.