Data Confidentiality & Security

Privacy Policy

Last Updated: September 12, 2026 • Effective Date: January 1, 2026

At GhostEdgeX, we treat your trading executions, strategy notes, and financial performance as strictly confidential trade secrets. We never sell your data or use your private trading history to train public AI models.

Bank-Grade Encryption

All data is encrypted in transit via TLS 1.3 and at rest with AES-256 via Row-Level Security.

Zero AI Training

Your trades and reviews are never used to train public machine learning models or shared with third parties.

Full Right to Erasure

Export your data to CSV or permanently purge your account and trades in 1 click at any time.

01. Information We Collect

When you register for and use GhostEdgeX (“Service”), we collect certain information to provide analytics and journaling capabilities:

Account Credentials: Your email address, encrypted password hash, and display name.
Trade Logs & Execution Data: Order timestamps, entry prices, exit prices, contract sizes, instrument symbols (e.g. NQ, ES, MNQ), order IDs, and commissions imported from your broker or CSV uploads.
Journaling & Psychology Entries: Subjective review tags, mistake labels, tilt flags, and custom playbook notes you create.
Billing Information: Payment processing is handled by Stripe. We do not store your complete credit card or banking details on our servers.

02. How We Use Your Data

We process your information solely to deliver the GhostEdgeX product features, including:

Reconstructing round-trip trades from raw broker execution logs.
Computing equity curves, drawdown metrics, win rates, and daily session P&L.
Detecting behavioral leaks (e.g., revenge trading, over-risking, and fatigue).
Powering the on-demand AI Coach with contextual session insights.
Managing subscription tier access and billing lifecycle events.

03. AI Coach & Inference Privacy

Our AI Coach features utilize stateless inference via enterprise LLM APIs (such as Groq or Google Cloud). When you request an AI session debrief:

Stateless API Processing

Only anonymized session summary statistics (net P&L, number of trades, hold times, and tagged behavioral leaks) are transmitted to the inference engine. Prompts are not used by the model provider for training or fine-tuning public weights.

04. Third-Party Service Providers

We partner with trusted, SOC-2 compliant infrastructure providers to operate the service:

Supabase: Managed PostgreSQL cloud database with active Row-Level Security (RLS) guaranteeing that queries can only access the logged-in user’s records.
Stripe: PCI-DSS Level 1 compliant billing infrastructure handling card transactions, ACH direct debit, and subscription renewals.
Yahoo Finance (CME Continuous Feeds): Anonymous, public market price bar queries for trade session replay.

05. Data Retention & Erasure (GDPR & CCPA)

You retain absolute ownership over your trade history. You have the right to:

Export: Download your entire trade log as a standard CSV file at any time from the Settings page.
Delete Accounts: Remove specific trading accounts and their corresponding trades directly from Account Management.
Full Profile Erasure: Contact us or use account deletion to instantly purge your profile, trades, daily reviews, and billing links from our database.

06. Contact Us

If you have questions regarding this Privacy Policy or wish to submit a data request, please reach out to our team:

GhostEdgeX Privacy & Data Security

privacy@ghostedgex.com