Privacy Policy

Last updated: 15 August 2026 · POPIA compliant

1. Who We Are

TradeLens (tradelens.co.za) is a South African trading analytics platform. We are the responsible party for the personal information we collect and process, as defined under the Protection of Personal Information Act 4 of 2013 (POPIA).

Contact: support@tradelens.co.za

2. What Information We Collect

• Account information: email address, name, password (hashed — never stored in plain text)
• Trading data: trade history, open positions, account balance, equity, swap costs — pulled from your MetaTrader terminal via the EA
• Journal data: your trade journal entries, mood scores, discipline scores, and notes
• Settings: your risk limits, profit targets, notification preferences, and theme settings
• Usage data: login times, device type, browser type, and IP address for security purposes
• Payment data: payment confirmation records — card details are never stored by TradeLens, they are handled entirely by PayFast

3. How We Use Your Information

• To provide and operate the TradeLens platform
• To power the AI trade coach (your data is sent to the Anthropic API to generate coaching reports)
• To send Telegram and email alerts you have configured
• To process your subscription payments via PayFast
• To send transactional emails (account confirmation, password reset, billing notifications)
• To detect and prevent fraudulent or unauthorised access
• To improve the platform based on aggregated, anonymised usage patterns

4. AI Coach Data Processing

When you request an AI coaching report, your trading data, journal entries, mood scores, and discipline scores are sent to the Anthropic Claude API to generate your personalised report. This data is processed under Anthropic's privacy policy. We do not share your personal identifying information (name, email) with Anthropic — only your trading performance data.

5. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only with:

• Supabase: our database and authentication provider (data stored on their servers)
• PayFast: payment processing only
• Anthropic: AI coaching report generation only
• Zoho: transactional email delivery
• Telegram: alert notifications you have configured
• Law enforcement: where required by South African law

6. Data Security

• All data is encrypted in transit via HTTPS/TLS
• Database access is controlled via row-level security — you can only access your own data
• Passwords are hashed and never stored in plain text
• API tokens are stored as hashed values and displayed only once at creation
• Multi-factor authentication is available and encouraged
• Login from new devices triggers an email notification

7. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days and then deleted unless you request earlier deletion. If your account is terminated for breach of Terms, your data is retained for 30 days and then deleted.

8. Your Rights Under POPIA

Under the Protection of Personal Information Act (POPIA), you have the right to:

• Request access to your personal information
• Request correction of inaccurate personal information
• Request deletion of your personal information
• Object to the processing of your personal information
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at support@tradelens.co.za. We will respond within 30 days.

9. Cookies

TradeLens uses session cookies to keep you logged in. We do not use advertising cookies or third-party tracking cookies. We use basic analytics to understand platform usage — this data is aggregated and anonymised.

10. Children's Privacy

TradeLens is not directed at persons under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has registered, contact us immediately at support@tradelens.co.za.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email with at least 14 days notice. Continued use of the Platform after changes take effect constitutes acceptance.

12. Contact & Complaints