Privacy policy

The controller responsible for data processing under the GDPR and the Swiss Federal Act on Data Protection (FADP) is:

TradeMentor Marktgasse 18 8706 Meilen, Switzerland Email: support@tradementorx.com

When you use TradeMentor, we collect the following data:

Registration data: email address, name (optional), password (stored in encrypted form).

Trading data: imported trades (instrument, direction, lot size, entry/exit prices, PnL, timestamps and commissions). You provide this data yourself through an account connection (for MetaTrader, via our MT5 Bridge or an Expert Advisor in your terminal; see section 4; other broker and exchange interfaces may also be used) or through a file import (CSV).

Usage data: journal entries, notes, custom rule sets, filter settings and dashboard configurations.

Technical data: IP address, browser type, operating system and access times (for security and error analysis).

We process your data exclusively for the following purposes:

• Providing the TradeMentor platform and all its features • Calculating performance metrics, discipline scores and coaching recommendations • Improving the platform and user experience • Communication (service emails, support and, optionally, newsletters) • Security (protection against misuse and unauthorised access)

We do NOT use your trading data for investment advice, trading signals, sale to third parties, advertising or profiling for external services.

On the “Trader Psychology” page, you may voluntarily complete a questionnaire about your behaviour and experience while trading. Processing starts only after you have given explicit consent there. Without consent, you can continue using your subscription and all other features unchanged.

Data categories: your time-stamped responses, including optional free-text entries and responses in in-depth modules; your if-then plans, including the guided plan steps and the obstacles you select; your goals (area, metric, starting and target value, period, status, measurement rule and the trading account evaluated for that goal); your focus pattern (suggested or selected by you, including its start and end and the baseline from your trades recorded when it starts); your quick-check responses (for each day and plan: “yes”, “no” or “did not occur”, and your mood on a scale from 1 to 5); your evening-check responses (whether your situation occurred that day, how often you applied your plan and, optionally, a reason from a fixed list); your pre-session check and prompt settings; your pre-session check data (time and, optionally, your condition that day on a scale from 1 to 5); the trade moment when a prompt was shown to you; your optional entries on individual trades (“Stop changed?” and one feeling word from a fixed list); skipped setups with the day and a reason from a fixed list; and proof of consent (time, version, IP address and browser identifier). Individual responses, for example about financial strain or concealing losses, and free-text entries may reveal information about your health. We therefore treat all information on this page as particularly sensitive personal data (Art. 5(c) FADP) or health data (Art. 9 GDPR).

Purpose and profiling: self-reflection and training of your trading behaviour. Based on your responses, we use fixed rules that are the same for everyone to calculate a behavioural profile and compare it with your trading data (profiling, Art. 5(f) FADP / Art. 4(4) GDPR). Because several personality aspects are linked, we treat this as high-risk profiling (Art. 5(g) FADP). No language model (AI) is used. The profile is not stored; it is recalculated each time you open the page. The same applies to goal progress, the marking of trades where a measured pattern occurred, and the streak, moments and weekly letter for your focus pattern (based on your trades and quick-check and evening-check responses). The weekly letter is neither stored nor sent. We compare your own entries on trades with breaches of your strategy rules and show discrepancies only as a question. We never infer feelings or diagnoses from trading data. You see the pre-session check and post-import prompts only if you enable them yourself. For a prompt, we also read the latest account values reported by your terminal (balance and equity) so that we do not show a prompt when a position is probably open. This is solely for your own view; we do not make decisions about you based on it. Your trading data is read only and never changed. None of this information is sent to an AI language model. The evaluation is not a medical or psychological assessment and is not investment advice.

Distress notice: if your responses indicate possible distress, we display a neutral note that speaking with a qualified professional may help. This is information only and has no effect on your account; we do not disclose anything.

“According to plan?” on a trade: this question (yes, no or unsure) is available to all paying users in the trade details. It is part of your journal, is not covered by this consent and is not health data. It remains after consent is withdrawn, is deleted with the trade or your account and is included in the server data export. Trader Psychology reads it only with your consent as part of your self-assessment.

Legal basis: Switzerland — your consent as a justification (Art. 31(1) FADP), given explicitly (Art. 6(6) and (7) FADP). EU/Germany — your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR).

Recipients and international transfers: data is stored by our database provider Turso (server location: EU) and delivered and processed via Vercel Inc. (server location: Ireland). Both providers are based in the United States, so access from the United States cannot be ruled out. Vercel is certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks. Data is not disclosed to any other third parties.

Retention: until you withdraw your consent or delete your account. We retain completed questionnaires so that you can view your development over time, as well as your goals, focus patterns, quick-check and evening-check responses and entries from the pre-session check and on trades. Entries attached to a trade are deleted with that trade. Incomplete questionnaires expire and are deleted 14 days after they are started. If you switch to another subscription, the data remains stored until you delete it.

Withdrawal: at any time on the “Trader Psychology” page (under “Settings”, or directly on the page if you do not have an Elite subscription). When you withdraw consent, all data listed above (responses, plans, goals, focus patterns, quick-check, evening-check and pre-session check data, settings, prompts, entries on trades and skipped setups) and proof of consent are deleted immediately; “According to plan?” remains as part of your journal. If a new version of the consent applies, your data remains stored but cannot be accessed again until you renew your consent. Withdrawal applies prospectively; processing carried out before withdrawal remains lawful. Until you withdraw consent, the data is included in the server data export (Settings → Privacy).

The Community has two parts.

A. Feedback to the team: you can suggest ideas, support roadmap items posted by the team and report bugs. You can see your own suggestions with their status, rationale and the team's response; other users cannot see them, only the team can. For a bug report, we store what you wanted to do, what happened and limited technical context (the app page without parameters, window size, display mode, language, browser family, app version and time). Cookies, form content, trading data and the complete user agent are not included.

B. Exchange (pilot): pilot participants exchange trading experiences under a pseudonym through posts on trade review, rules, psychology and questions, replies, “Helpful” marks, conclusions and, optionally, an excerpt from one of their own trades. Accounts with a paid plan (Pro or Elite, including during the trial period) and a Swiss billing country, as well as individually invited accounts, can participate.

Data categories: • Pseudonym and confirmation of the community rules with version and time; also IP address and browser identifier as proof of confirmations and consent. • Your posts, replies, “Helpful” marks, conclusions, reports and blocks. • When sharing a trade, only the instrument, direction, result in R (rounded) and the fields you select (setup, session, strategy, planned R, rule breaches and week). Never amounts, account size, quantity, prices, broker, account, notes or time. The date is off by default. • The billing country from our payment provider Stripe (country code only) to check whether you are eligible for the pilot. • Moderation data: team decisions with the rule and rationale, the result of automated review (decision, score and reasons, never the text), and abuse-prevention counters per account and IP address. • For a report submitted as “illegal”: your name, email address and declaration that the report is made in good faith.

Psychology topic (optional): posts and replies in this topic may contain health information (particularly sensitive personal data). We process them only with the explicit consent you give before your first post in this topic. Without this consent, you can use all other topics unchanged. You may withdraw consent at any time; we will then delete your posts and replies in this topic.

Recipients: • Other pilot participants see your pseudonym, posts, replies, conclusions, shared trade excerpt and number of “Helpful” marks. They never see your name, email address or username. • The team additionally sees reports, automated-review results and, in the team view, your username so that it can moderate. • A pseudonym does not reliably prevent people who know you from recognising you from a trade or your writing. • Technical providers: database (Turso) and hosting (Vercel) as described in section 5; Cloudflare (Turnstile) checks whether a human is posting on the first post and after an unusually high number of actions. • We do not send the texts to an AI provider. Automated review runs on our server.

Purposes: • A: process feedback and bugs and improve the app. • B: enable traders to exchange experience. • A and B: prevent misuse, enforce rules, remove illegal content and explain and document decisions. • Pilot analysis for the team uses totals only, such as the proportion of participants who posted; we do not show values for groups of fewer than 5 people.

Legal bases (GDPR where applicable): • Providing the Community as part of the app: Art. 6(1)(b) GDPR. • Moderation, abuse prevention and documentation of decisions: Art. 6(1)(f) GDPR (legitimate interest in a safe exchange) and, where legally required, Art. 6(1)(c) GDPR. • Psychology topic: explicit consent, Art. 9(2)(a) GDPR; in Switzerland, Art. 6(6) and (7) FADP. • Billing country for participation: Art. 6(1)(f) GDPR.

Retention: • Your posts and replies: until you withdraw them or delete your account. • Content removed by the team: 30 days (for an appeal), after which the text is deleted. • Moderation decisions, resolved reports and automated-review results: 12 months. • In-app notifications: 90 days. • When you delete your account, we delete your Community data. Moderation decisions and your reports remain without data identifying you until their retention period expires. Replies by other people under your post remain with the notice “Post deleted”.

Your rights: you may request access and download your data (the server data export under Settings → Privacy also contains your Community data), request rectification and deletion, object to processing and withdraw consent at any time. You can withdraw your own posts and replies yourself. You can appeal a moderation decision through “Report a bug”. You may lodge a complaint with the FDPIC or, in the EU, with the supervisory authority where you live.

MT5 Bridge: to connect, you enter the login, server and investor password for your MetaTrader 5 account. The investor password permits read-only access at the broker. Enter only the investor password, never the master password (trading password).

Storage: we store the investor password in our database using AES-256-GCM encryption so that automatic synchronisation works without asking you to enter it again. We store the login and server together with the time of the last synchronisation.

Retrieval: the data is retrieved by our own bridge server with MetaTrader terminals, which we operate in Switzerland. Our platform sends the login, server and investor password to this server over an encrypted HTTPS connection. It uses them to log in to your broker's server and read account data, open positions and completed deals. The bridge server is connected to the internet through Tailscale Funnel (see section 5); the connection is decrypted only on our server.

Expert Advisor: alternatively, an Expert Advisor in your MetaTrader terminal sends your trades directly to us using a personal token. We do not need a password for this.

This means that TradeMentor only reads data. The platform CANNOT open, close or modify trades or move money. We have no access to your trading capital.

Your data is NOT sold to third parties or shared for advertising purposes.

Data is disclosed only in the following cases:

• Hosting provider (Vercel Inc., USA; server location Ireland; certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks): operation of the platform, including all data transmitted during use, such as IP addresses and server logs. Vercel processes data under its own privacy policy. • Database provider (Turso, based in the USA; server location EU): storage of your account and trading data. Access from the United States cannot be ruled out. • Payment provider (Stripe Payments Europe, Ltd., Ireland, together with Stripe, LLC, USA; Stripe, LLC is certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks): payment processing and subscription management. We send your email address, username, user ID and selected subscription. You enter your name, billing address and payment details directly with Stripe. Stripe acts partly as an independent controller for payment data, for example for fraud prevention and legal obligations. • Email (Hostpoint AG, Switzerland): sending service emails (login links, confirmations, subscription and account messages) and receiving your emails and support messages from the contact form, including email address, name and message content. We do not store contact-form messages in our database. Only if this delivery channel is not configured do we send through Resend (Plus Five Five, Inc., USA). • AI providers, only with your AI Coach consent (OpenAI, USA; depending on the setting, Anthropic, USA instead): AI Coach and AI evaluations using your chat messages and history, attached images, trades or a summary of them and your onboarding information. OpenAI converts Voice Journal recordings into text. Access from the United States cannot be ruled out. • Sign-in with Google (Google LLC, USA; certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks), only if you choose it: Google identifier, email address, name and profile image. Google acts as an independent controller and learns that you sign in to our service. • Error monitoring (Sentry, Functional Software, Inc., USA; Sentry EU region in Germany; certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks): error reports with technical information (page, browser, operating system and time) and performance measurements for about 10% of visits, technically including your IP address. We remove passwords, keys and email addresses before transmission and do not record sessions. • Bot protection (Cloudflare, Inc., USA; Turnstile service): during registration, sign-in, password recovery, use of the contact form and in the Community (section 3b), Turnstile checks whether a human is making the entry. Your IP address, browser and device information and signals from your interaction with the page are sent to Cloudflare. • Economic calendar (TradingView, Inc., USA): when you click “Load” on the Economic Calendar page, your browser loads TradingView's calendar widget (section 9). TradingView then receives your IP address, browser data and language setting and may set its own cookies in the widget. TradingView acts as an independent controller. • Transport to the MT5 Bridge (Tailscale US Inc., USA, or Tailscale Inc., Canada): Tailscale Funnel forwards the encrypted connection between our platform and our bridge server (section 4). Tailscale does not decrypt it and cannot see your access or trading data in plain text. • Brokers, exchanges and trading platforms that you connect yourself, such as cTrader, Interactive Brokers, Tradovate, DXtrade, OANDA, crypto exchanges through CCXT and Hyperliquid: at your request, we send your credentials or account or wallet identifier to that provider to retrieve your account and trading data. The provider's location and server location vary and may be outside Switzerland and the EU. • Legal obligation: where disclosure is required by law. • With your explicit consent: for example, for Mentor Share links that you activate yourself.

Recipient list last updated: 2 October 2026.

Your data is stored on servers in the EU/EEA. Data is transmitted in encrypted form (TLS/SSL).

We retain your data for as long as your account remains active. After termination, your data is deleted within 30 days unless statutory retention obligations apply.

Trading data is stored locally in your browser (localStorage) and, optionally, on our servers.

You have the following rights at any time:

Right of access: you may request information about the data we store about you.

Right to rectification: you may have inaccurate data corrected.

Right to erasure: you may request deletion of your data (the “right to be forgotten”).

Right to data portability: you may request a complete export of your data in a commonly used format.

Right to object: you may object to the processing of your data.

To exercise your rights, contact us at support@tradementorx.com.

TradeMentor provides the following options:

Data export: you can export all your trading data as a CSV file at any time (Dashboard → Export button).

Account deletion: you can delete your account at any time in Settings or by emailing support@tradementorx.com. When your account is deleted, all personal and trading data is permanently removed.

TradeMentor uses only cookies that are technically necessary for the platform to function, such as session management and theme settings.

We do NOT use tracking cookies, Google Analytics or advertising trackers. Your privacy matters to us.

Economic calendar: we load the TradingView (USA) calendar widget only after you click “Load”. Only then does TradingView receive your IP address and browser data and may set its own cookies in the widget. We store your choice only in your browser, for the session or permanently; you can withdraw it below the calendar or under Privacy in Settings.

Local browser storage (localStorage) is used for offline functionality and performance optimisation.

We may update this privacy policy when necessary to reflect changes in legal requirements or changes to our platform.

We will notify you of material changes by email or through the platform.

If you have questions about privacy or wish to exercise your rights, you can contact us at any time:

TradeMentor — Privacy Email: support@tradementorx.com