Privacy

EL Journal — Privacy Policy

Last updated: September 18, 2026

This Privacy Policy explains how Edgewise Labs ("we", "us", "our") collects, uses, and protects your information when you use EL Journal (the "Service") — our trading journal app that imports your closed trades, lets you review and annotate them, and offers an AI trading coach. Edgewise Labs is an unincorporated business based in Canada. We handle your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). (EL Expenses, our separate household product, has its own Privacy Policy.)

What we collect

  • Account details — your name and email, and the sign-in identifiers used to log you in. Authentication is handled by Clerk (see below); we do not store your password.
  • Broker connection data — when you connect a broker, we store the secure access token that lets us read your trade history, plus the closed/filled trades we read (instruments, entry and exit prices, position sizes, profit and loss, and timestamps). We never receive or store your broker login credentials.
  • Trades you import yourself — the trade history in any CSV file you upload.
  • Journal content you add — the notes, tags, ratings, and screenshots you attach to your trades and setups.
  • AI coach activity — the trade data and questions sent to the AI coach so it can give you feedback, and its responses.
  • Payment status — your subscription plan and whether it is active. Card details are handled by Stripe and are never stored on our servers (see below).

Why we collect it

We use your information only to run the Service: to create and secure your account, import and store your trades, produce your analytics, calendar, and reports, power the AI trading coach, and process your subscription. We do not sell your personal information, and we do not use it for advertising.

Broker connections — read-only

EL Journal connects to your broker to read your closed trades only. For brokers that support it — including Tradovate and NinjaTrader — you authorize the connection through the broker's own secure OAuth screen, and we receive only a limited access token. That access is strictly read-only: EL Journal never places orders, cancels orders, moves funds, or touches your open positions. Your broker login credentials are entered with the broker, not with us, and are never stored by EL Journal. You can revoke the connection at any time by disconnecting the broker in the app (or from your broker's own connected-apps settings).

Third parties we share data with

We rely on a small number of trusted service providers ("processors") to operate the Service. Each receives only the data needed for its role:

  • Clerk — provides sign-in and account authentication. It processes your login identifiers (such as your email) to log you in and keep your account secure.
  • Your broker (e.g. Tradovate, NinjaTrader) — connected at your request over a read-only link so we can import your closed trades. Your use of the broker is also subject to the broker's own privacy policy and terms.
  • Anthropic (Claude) — when you use the AI trading coach, the relevant trade data and your questions are sent to Claude's API so it can generate personalized feedback.
  • Stripe — processes your subscription payments. Your card details are entered directly with Stripe and handled by Stripe; we do not receive or store your full card number.
  • Neon (database) and Vercel (hosting) — store and serve your account, trade, and journal data so the app can run.

Cross-border storage

Our database (Neon) and hosting (Vercel), and some of the processors above, run on servers located in the United States. This means your information is stored and processed outside Canada. While it is outside Canada, it may be accessible to foreign courts, law enforcement, and regulatory authorities under the laws of that country. By using the Service you consent to this cross-border transfer and processing.

Data retention

We keep your account, trade, and journal data for as long as your account is active and you continue to use the Service. You can export your entire journal at any time, and you can delete your data or close your account whenever you like. When you ask us to delete your data or close your account, we remove your personal information within a reasonable period, except where we must keep limited records to meet legal, tax, or billing obligations.

Your rights under PIPEDA

Under PIPEDA you have the right to access the personal information we hold about you and to request correction of anything inaccurate. You may also withdraw your consent, subject to legal and contractual limits, by disconnecting your broker or closing your account. To make any of these requests, contact us at the address below and we will respond within a reasonable time.

Security

We take reasonable technical and organizational measures to protect your information, including transport encryption, secure storage of broker access tokens, and access controls at our providers. No online service can be guaranteed to be perfectly secure, but we work to keep your data safe.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be communicated where appropriate.

Contact us

Questions about this policy or your data? Contact Edgewise Labs at [email protected].