Privacy Policy

LynxTrades ("we," "our," or "us") provides a trading journal and analytics platform at lynxtrades.com (the "Service"). This Privacy Policy describes what information we collect when you use the Service, how we use and share it, how long we keep it, and the choices you have. We do not sell your personal information, and we never use your trading or journal data for advertising. If you arrived from one of our ads, we measure that. Section 5 explains what is sent and how to switch it off.

Account information

When you register we collect your email address and, if you provide them, a display name and profile photo (for example, when signing in with a Google account). Passwords are handled by our authentication infrastructure and are never visible to us in plain text.

Trading and journal data

The core of the Service is data you choose to record: trades and executions (symbols, prices, quantities, dates, fees), trading accounts and balances, deposits and withdrawals, prop-firm challenge settings, setups, tags, mistakes, risk rules, emotional and confidence ratings, notes, and any images or files you attach.

Broker connection data

If you connect a brokerage or prop-firm account, we receive read-only trade, position, and balance history for the accounts you authorize. Connections are established through the broker's own authorization flow. We never ask for or store your master brokerage login credentials.

Billing information

Subscription payments are processed by our payment processor, Stripe, on their hosted checkout and billing pages. Your card details go directly to Stripe and are never stored on our systems; Stripe's handling of your information is governed by its own privacy policy. We store your subscription plan and status, billing-period dates, and a customer identifier so the Service can grant the correct features.

Support and contact information

When you submit the contact form or an in-app support request, we collect your name (if provided), email address, and the contents of your message, and we retain the correspondence history needed to help you.

Referral data

To administer the referral program we generate a referral code for your account and record the relationship between referrers and referred accounts, referral counts, and reward status.

Usage, log, and security data

Like most online services, our infrastructure automatically records standard technical information when you use the Service: IP addresses, browser and device type, request timestamps, authentication events, and error logs. We also record account-activity timestamps (such as last sign-in and last-active dates) and email delivery events (such as bounces and spam complaints) so we can keep the Service and our mailing lists healthy. We also record our own first-party page and sign-up counts, described in Section 5. We do not run third-party analytics or advertising trackers on the Service.

• Operating the Service: storing and displaying your journal, computing your analytics and statistics, syncing trades from connected brokers, and maintaining your preferences.
• AI features: when you use Onyx (chat, trade review, coaching, news summaries, risk alerts) or AI CSV import, the relevant trading data, notes, file contents, and prompts are processed by AI infrastructure to generate the response or column mapping. This processing is performed to serve your request; your data is not used to train public AI models.
• Transactional communications: account, security, billing, subscription, and support emails (for example, payment receipts, renewal and cancellation confirmations, and replies to your requests). These are necessary to run the Service and cannot be opted out of while you hold an account.
• Marketing communications: occasional product news and feature emails, only where permitted; every marketing email contains an unsubscribe link, and you can also opt out in your account settings.
• Referral program: tracking referral relationships, applying billing credits, and sending reward notifications.
• Security and fraud prevention: protecting accounts, enforcing rate limits and subscription limits, investigating abuse, and securing the Service against unauthorized access.
• Legal compliance: meeting our tax, accounting, and other legal obligations, and enforcing our Terms of Service.

We share personal information only as described below, and never for third-party advertising:

• Service providers: vendors that process data on our behalf and under our instructions to run the Service: cloud hosting, database, and file-storage infrastructure; payment processing (Stripe); transactional and marketing email delivery; AI processing for the features described above; and brokerage-connectivity services used to establish the broker connections you request. Each provider receives only the data needed for its function.
• Brokerage platforms: when you connect an account, you interact directly with the broker's or connectivity provider's authorization flow, which is governed by that party's own privacy policy.
• Legal requirements: we may disclose information where we believe in good faith that disclosure is necessary to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of LynxTrades, our users, or others.
• Business transfers: if LynxTrades is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; this Policy would continue to apply to it until amended.

Our Cookie Policy sets out each category, what it is used for and how long it is kept. In summary, we store:

• Essential: your sign-in session, a cache of your own journal data held in your browser for performance, your interface preferences and unsent form drafts, and the cookie choices you have made.
• Analytics (optional): cookies that count visits and record which link or advertisement brought you here. They are kept for up to 180 days, are never shared with another site, and contain nothing about you or your trading.
• Advertising (optional): used only to establish that a visit which began with one of our advertisements resulted in an account being created.

If you arrived by clicking one of our advertisements and later create an account, we report that sign-up to the advertising platform so we know which advertisements work. That report never contains your email address, your name, or anything in your journal, and visitors who did not come from an advertisement are never reported at all.

Analytics and advertising are optional, and you control both. On your first visit a cookie notice asks: in the EU, the United Kingdom and Switzerland nothing optional is used until you accept; elsewhere the optional categories start on and the notice says so. Either way you can change your choices at any time from "Cookie settings" in the site footer, from the Cookie Policy, or from "Privacy choices" in Settings → Support. We also honour the Global Privacy Control and Do Not Track browser signals, which override any earlier acceptance.

YouTube videos you embed in notes load in YouTube's privacy-enhanced (no-cookie) mode, and third-party pages you are redirected to, such as Stripe checkout or a broker's connection portal, set their own cookies under their own policies.

We keep your information for as long as your account exists so the Service can function. If you request account deletion, we delete or de-identify your account data from our active systems, after which it may persist for a limited period in encrypted backups before being purged on the normal backup cycle. We retain billing records for as long as tax and accounting law requires, and we may retain limited information where reasonably necessary to prevent fraud, resolve disputes, or enforce our Terms.

Your data is encrypted in transit (TLS) and at rest (AES-256). Access is governed by per-user security rules so that only you can read or write your own journal data. Broker connections are read-only by design, and master brokerage credentials are never stored. While we take these measures seriously, no method of transmission or storage is completely secure, and we cannot guarantee absolute security; please use a strong, unique password and notify us promptly of any suspected unauthorized access.

• Access and correction: you can review and edit your account information and journal data directly in the application.
• Export: you can export your trade history as CSV and download a per-account JSON backup of structured data associated with the selected account from Settings → Accounts → Data Management, on any plan. JSON backups do not include attachments or other uploaded media, application settings, or broker connections.
• Marketing opt-out: use the unsubscribe link in any marketing email or the email preferences in your account settings. Transactional emails continue while you hold an account.
• Disconnecting brokers: you can remove a broker connection at any time in Settings → Accounts → Linked Brokerages; previously imported trades remain in your journal until you delete them.
• Deletion: you can request deletion of your account and associated data through the in-app support form or the contact form, and we will process the request as described in Section 6.
• Regional rights: depending on where you live, you may have additional legal rights, such as the right to access, correct, delete, or receive a portable copy of your personal information, or to object to or restrict certain processing. You can exercise these rights through the channels above; we will verify the request and respond within the timeframe required by applicable law. We do not sell personal information or share it for cross-context behavioral advertising.

The Service is operated from the United States, and your information is processed and stored on infrastructure located in the United States. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

The Service is not directed to anyone under 18, and our Terms of Service require users to be at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us through the contact form and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and provide notice via email or prominent notice in the Service before the changes take effect. Your continued use of the Service after changes become effective constitutes acceptance of the revised Policy.

Questions or requests about this Privacy Policy or your data should be submitted through the contact form or, if you have an account, via Settings → Support in the application.