Privacy policy

Last updated: 24 June 2026

This policy explains what personal data Chartself ("we", "us", "our") collects when you use the Chartself trading journal platform, how it is used, and the choices you have. By creating an account or using Chartself, you agree to the practices described here.

1. Who we are

Chartself is an AI-powered trading journal platform accessible at chartself.com and app.chartself.com. For the purposes of applicable data protection law, Chartself acts as the Data Controller for personal data collected through this platform.

For any privacy-related matters, contact us at privacy@chartself.com.

2. Personal data we collect

Account data. When you register, we collect your email address and a securely hashed password. If you choose to add a display name, timezone, currency, or starting balance, we store those too.

Trade data. Everything you log — symbols, prices, quantities, notes, emotions, tags, setups, and journal entries — is stored so the app can function. This data is yours. We do not share or sell it.

Payment data. Subscription payments are processed by a third-party payment processor. We never see or store your full card number. We retain only your subscription status and a customer identifier for plan management.

AI API keys (BYOK). If you use the Bring Your Own Key (BYOK) AI feature, you supply your own API key from a third-party AI provider. Your key is encrypted using AES-256-GCM before storage. We do not use your key for any purpose other than making requests on your behalf when you trigger an AI feature. We do not log the contents of those requests on our servers.

Technical data. We may automatically collect standard technical information such as IP address, browser type, and device type for security, debugging, and service improvement purposes.

Communications data. Emails you send to our support or privacy addresses are retained to assist with your query.

3. How we use your personal data

• To provide, operate, and maintain the Chartself platform
• To process subscription payments and manage your plan
• To send account-related emails (verification, password reset, billing)
• To send optional notifications you have enabled, such as weekly AI reports and in-session alerts — these can be turned off in Settings at any time
• To detect, prevent, and address fraud, abuse, or security issues
• To comply with applicable law and respond to lawful regulatory requests

We do not sell your personal data, share your trading data with advertisers, or use your trade data to train AI models.

4. Data sharing and third parties

We share your personal data only with trusted third-party service providers where necessary to operate and deliver the Chartself platform. These providers are carefully selected and are contractually bound to handle your data securely and only for the purposes we specify.

The categories of service providers we engage include:

• Database and authentication services
• Payment processing services
• Technology infrastructure services

In addition, if you use the BYOK AI feature, your trade context and chat messages are transmitted to the AI provider you have selected and configured in your AI Settings. This transmission occurs under your own API key and is subject to your chosen provider's privacy policy.

We do not sell your personal data, share your trading data with advertisers, transfer your data to data brokers, or share your data with any party not involved in delivering the service.

5. Cross-border data transfers

As an online platform, your data may be processed in countries outside your own. We ensure that all cross-border transfers are made only to service providers with adequate data protection standards and appropriate contractual safeguards in place. By using Chartself, you acknowledge and consent to these transfers as necessary for the provision of the service.

6. Cookies and local storage

We use essential cookies and local storage required for authentication and session management. We also store your theme preference and active chat session in local storage to improve your experience. We do not use third-party advertising or behavioural tracking cookies.

7. Data retention and deletion

Your data is retained for as long as your account is active. You can permanently delete your account and all associated data at any time from Settings → Danger zone. This action is immediate and irreversible. We may retain minimal billing records where required by applicable law. Upon account deletion, all personal data is permanently removed from our systems within 30 days.

8. Your rights

Depending on your location, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. You can exercise most of these rights directly within the app. For anything else, contact privacy@chartself.com and we will respond within a reasonable timeframe.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your country of residence.

9. Data security

We implement industry-standard security measures including AES-256-GCM encryption for sensitive fields such as AI API keys, HTTPS encryption for all data in transit, row-level security on our database so users can only access their own data, and secure hashed password storage. No system is 100% secure and we cannot guarantee absolute security. In the event of a data breach likely to cause significant harm, we will notify affected users without unnecessary delay.

10. Children's privacy

Chartself is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact privacy@chartself.com and we will delete the account promptly.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you via email or an in-app notice. Continued use of Chartself after changes take effect constitutes acceptance of the updated policy.