Template only: replace with lawyer-reviewed text before launch.

Privacy Policy

[Last updated: DD Month YYYY]

[Company legal name] ("VELTRIX", "we", "us") provides a trading journal and analytics service. This policy explains what information we collect, how we use it, and the choices you have.

1. Introduction

This policy applies to the VELTRIX website and application. [Describe the scope: which products, domains and jurisdictions are covered.]

[Identify the data controller, its registered address and, if applicable, its EU/UK representative.]

2. Information We Collect

[Account data: name, email address, password hash, authentication provider, plan and billing identifiers.]

[Trading data: trades, fills, accounts, notes, screenshots and any files you upload or sync through a broker connection.]

[Technical data: IP address, device and browser type, pages visited, and diagnostic logs.]

3. How We Use It

[Provide the service, calculate analytics, generate AI summaries and maintain your journal.]

[Operate billing, prevent fraud and abuse, and comply with legal obligations.]

[Send service and product communications, subject to your preferences and applicable consent requirements.]

4. Sharing and Disclosure

[List processors: hosting, database, payments, email delivery, error monitoring and AI inference providers, with their locations.]

[Describe any sharing with professional advisers, authorities where legally required, and in a merger or acquisition.]

[State clearly whether personal data is sold. If not, say so.]

5. Cookies and Analytics

[List each cookie and tracker: name, purpose, duration and whether it is strictly necessary, analytical or marketing.]

[Explain how visitors consent, how consent is stored, and how they withdraw it.]

6. Your Rights and Choices

[Access, correction, deletion, restriction, portability, objection, and withdrawal of consent where applicable.]

[Explain how to submit a request, expected response time, verification steps, and how to complain to a supervisory authority.]

7. Data Security

[Describe encryption in transit and at rest, access controls, logging, and how security incidents are handled.]

8. Data Retention

[State retention periods per data category, and what happens to data when an account is closed.]

9. Children's Privacy

[State the minimum age for the service and the process for deleting data collected from underage users.]

10. International Transfers

[Identify transfer mechanisms such as standard contractual clauses and describe any transfer impact assessments.]

11. Changes to This Policy

[Explain how material changes are notified and how version history is kept.]

12. Contact

[Data protection contact email, postal address and, where required, the identity of the DPO.]

This document is a structural template and is not legal advice.