Privacy Policy

1. Information we collect

• Account details — name, email, date of birth, and a securely hashed password.
• Journal content — trades, notes, strategies, rules, tags, prop-firm or account labels (including labels for practice / Backtest journals), day notebook entries, screenshots you upload, and CSV trade exports you paste for import.
• Billing data — subscription status and customer/subscription identifiers. Card details are handled directly by Stripe; we do not store full card numbers.
• Usage and technical data — IP address, browser information, and log data used for security (including rate limiting), diagnostics, and to provide the Service. We also use Vercel Analytics for aggregated product usage (for example page views); this is not used for advertising.
• Market data requests — when you use Backtesting (Beta) or related chart features, our servers request historical price bars from market-data providers using symbols, dates, and intervals you select. Those requests are not used to build a personal advertising profile.
• Device preferences — some settings and Backtest state (for example chart drawings, chart appearance, and related preferences) may be stored only in your browser (local storage) on your device and are not sent to our servers unless a feature requires it.

2. How we use your information

To create and manage your account; provide journaling, analytics, reports, strategies and rules, CSV import, Nomad process grades, AI features (including analytics chat), and Backtesting (Beta) according to your plan; process payments and subscriptions; authenticate you and keep the Service secure; understand product usage; provide support; and comply with legal obligations. Free accounts include dashboard and manual trade entry (up to 20 trades per month). Pro adds unlimited trades, CSV import, analytics coach, Nomad grades, strategies and rules, AI features, and Backtesting (Beta). We do not sell your personal information.

3. AI processing

If you use Pro AI features, the relevant content (such as screenshots, trade notes, strategy and journal rules, and trade facts used for analytics chat or Nomad grades) is sent to our AI providers to generate analysis and return results to you. CSV text you paste for import is stored as journal trades on our servers; it is not sent to AI providers unless you later use an AI feature on those trades. We do not use your content to train our own models. AI providers process this content under their own terms and privacy commitments.

4. Who we share it with

We share personal information only with service providers ("subprocessors") who help us run the Service, and only as needed to provide it:

• Vercel — Application hosting, delivery, and product analytics (Vercel Analytics) (United States / global edge).
• Neon — PostgreSQL database hosting (account, journal, and product data) (United States / EU).
• Stripe — Payment processing and subscription billing (United States).
• Resend — Transactional email delivery (United States).
• Anthropic (Claude) — AI analysis of screenshots, trade notes, analytics chat, and Nomad process grades (Pro features) (United States).
• OpenAI — Optional fallback AI vision analysis when configured (United States).
• Polygon (Massive.com) — Historical market data for Backtesting (Beta) and related chart features (United States).

We may also disclose information where required by law, to enforce our Terms, or to protect the rights, safety, and security of our users and the Service.

5. Overseas transfers

Some of our subprocessors are located outside Australia (primarily the United States). By using the Service, you acknowledge that your information may be stored and processed overseas. We take reasonable steps to ensure recipients handle your information appropriately.

6. Cookies and similar technologies

We use essential cookies and local storage to keep you signed in (auth session) and to remember preferences such as theme, dashboard layout, and Backtest chart state on your device. Blocking the session cookie will prevent you from logging in. We also use Vercel Analytics for aggregated product usage measurement. We do not use advertising cookies, and these technologies are not used for advertising or selling your data to third-party advertisers.

7. Security

We protect your information with measures including encrypted connections (HTTPS), hashed passwords, access controls, session invalidation on password reset, and rate limiting on sensitive endpoints. No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our safeguards.

8. Data retention

We keep your information while your account is active and as needed to provide the Service. When you delete your account or request deletion, we delete or de-identify your personal information within a reasonable period, except where we must retain certain records (for example billing records) to meet legal or accounting obligations. Device-only preferences remain on your device until you clear them in the browser.

9. Your rights

You may request access to, or correction of, the personal information we hold about you, and you may request deletion of your account and data. To make a request, contact privacy@nomadsys.tech. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Children

The Service is not intended for anyone under 13. We do not knowingly collect personal information from people under that age. If you believe a minor has provided us information, contact us and we will delete it.

11. Data breaches

If a data breach is likely to result in serious harm, we will notify affected individuals and the OAIC as required by the Notifiable Data Breaches scheme.

12. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with an updated date and, where appropriate, notified to you.

13. Contact

Privacy requests and questions: privacy@nomadsys.tech