1. Overview
TradeOptimiser ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services at tradeoptimiser.com ("the Service").
This policy applies to all users of the Service, including users in Australia and the United States. Where your jurisdiction provides additional rights, those are described in the relevant sections below.
By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
We collect the following categories of personal information:
Information you provide directly: • Full name (first and last name) • Email address • Phone number • Password (stored in hashed, salted form — we cannot read your password) • Date and time you accepted our Terms and Conditions
Information collected automatically: • IP address and approximate location (country/region) • Browser type and version • Device type and operating system • Pages visited and features used within the Service • Session duration and interaction data • Referring URL
Information from third parties: • Payment information is collected and processed directly by Stripe. We do not store your credit card details. We receive only a subscription status, customer ID, and subscription period from Stripe.
3. How We Use Your Information
We use your personal information for the following purposes:
• To create and manage your account • To provide and operate the Service • To process subscription payments via Stripe • To send transactional emails, including account verification, password reset, and subscription receipts • To respond to support enquiries • To monitor and improve the performance and security of the Service • To comply with our legal obligations • To enforce our Terms and Conditions
We do not use your personal information to make automated decisions that have a legal or significant effect on you without human oversight.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4. Legal Basis for Processing
Australian Users: We collect and handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our lawful bases for processing are: • Performance of a contract — processing necessary to provide the Service you have signed up for. • Legal obligation — processing required to comply with applicable law. • Legitimate interests — improving the Service, detecting fraud, and ensuring security, where those interests are not overridden by your rights.
United States Users (California): Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), we process your personal information on the following bases: • Performing the service you requested. • Our legitimate business interests, including security and fraud prevention. • Compliance with legal obligations.
We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.
5. Sharing Your Information
We share your personal information only in the following circumstances:
Service providers: We share data with trusted third-party service providers who assist us in operating the Service, subject to confidentiality obligations: • Stripe — payment processing and subscription management (stripe.com/privacy) • Resend — transactional email delivery • Vercel — hosting and infrastructure • PlanetScale / Neon — database hosting
These providers are contractually prohibited from using your data for any purpose other than providing services to us.
Legal requirements: We may disclose your information if required by law, court order, or government authority in Australia or the United States, or where we believe disclosure is necessary to protect the rights, property, or safety of TradeOptimiser, our users, or the public.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change via email or prominent notice on the Service.
We do not disclose your personal information to any other third parties without your consent.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
• Account data is retained for the duration of your subscription and for 7 years after account closure, as required for tax and accounting purposes under Australian law (Tax Administration Act 1953 (Cth)). • Usage and log data is retained for up to 12 months for security and performance monitoring purposes. • Payment records are retained as required by Stripe's data retention policies and applicable financial regulations.
You may request deletion of your account and personal data at any time (see Your Rights below). Some information may be retained after deletion where required by law or for legitimate fraud prevention purposes.
7. Data Security
We implement industry-standard security measures to protect your personal information, including:
• Passwords stored using bcrypt hashing with unique salts — we cannot view your password • All data transmitted over TLS/HTTPS encryption • Database access restricted to authorised systems only • Regular security reviews of our infrastructure
Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that is likely to result in serious harm, we will notify affected users and relevant authorities as required under the Notifiable Data Breaches scheme (Privacy Act 1988 (Cth)) and applicable U.S. state breach notification laws.
9. Your Rights
Australian Users — under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to: • Access the personal information we hold about you • Request correction of inaccurate or incomplete information • Make a complaint about how we have handled your personal information • Request deletion of your personal information (subject to legal retention obligations)
To exercise these rights, contact us at privacy@tradeoptimiser.com. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
United States Users (California) — under the CCPA/CPRA, California residents have the right to: • Know what personal information we collect, use, disclose, or sell • Request deletion of personal information • Correct inaccurate personal information • Opt out of the sale or sharing of personal information (we do not sell or share personal information) • Non-discrimination for exercising your privacy rights • Limit the use of sensitive personal information
To submit a verifiable consumer request, contact us at privacy@tradeoptimiser.com. We will respond within 45 days as required by the CCPA. For further information, you may contact the California Privacy Protection Agency at www.cppa.ca.gov.
10. Children's Privacy
The Service is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us at privacy@tradeoptimiser.com and we will take steps to delete that information promptly.
United States Users: We comply with the Children's Online Privacy Protection Act (COPPA). If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
11. International Data Transfers
TradeOptimiser operates infrastructure through third-party providers including Vercel and cloud database services, which may store data in the United States, Australia, or other jurisdictions.
Australian Users: When we transfer personal information outside Australia, we take reasonable steps to ensure the recipient handles your information in accordance with the Australian Privacy Principles, or you have consented to the transfer. By using the Service, you consent to the transfer of your information to our infrastructure providers as described in Section 5.
United States Users: Your information may be transferred to and processed in Australia or other countries. We ensure such transfers comply with applicable U.S. law and that your information receives adequate protection.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email or by posting a notice on the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
The date at the top of this page indicates when this policy was last updated. We encourage you to review this policy periodically.
13. Contact Us
For any privacy-related questions, requests, or complaints, please contact us at:
Email: privacy@tradeoptimiser.com Website: tradeoptimiser.com
Australian Users: If we do not resolve your complaint to your satisfaction, you may contact the Office of the Australian Information Commissioner (OAIC): Website: www.oaic.gov.au Phone: 1300 363 992
United States Users (California): You may also contact the California Privacy Protection Agency: Website: www.cppa.ca.gov