Privacy Policy

1. Who we are

TSpace ("we", "us", "our") is a trading journal and community platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web and mobile applications.

2. Information we collect

We collect information you provide directly and information from your use of our services:

• Account data: Email, username, password (hashed), display name, profile photo
• Trading data: Trade entries, journals, reflections, goals, achievements
• Social data: Messages, stories, follows, reactions, leaderboard participation
• Payment data: Billing handled by Stripe; we do not store full card numbers
• Usage data: App interactions, analytics (when you consent to analytics cookies)
• Device data: IP address, browser type, device identifiers (for security and functionality)

3. How we use your information

We use your information to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send you technical notices, security alerts, and support messages
• Respond to your comments and requests
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address fraud and abuse
• Comply with legal obligations

4. Sharing and disclosure

We share information with:

• Service providers (sub-processors) who process data on our behalf – see Section 9
• Other users when you choose to make content public (profile, stories, leaderboard)
• Legal authorities when required by law or to protect our rights

We do not sell your personal information.

5. Data retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion at any time. Some data may be retained for legal compliance, dispute resolution, or enforcement of agreements.

6. Your rights

Depending on your location, you may have the right to:

• Access – Request a copy of your personal data
• Rectification – Correct inaccurate data
• Erasure – Request deletion of your data
• Portability – Receive your data in a machine-readable format (export in Settings)
• Object / restrict – Object to processing or restrict how we use your data
• Withdraw consent – Where processing is based on consent

To exercise these rights, use the export and delete options in Settings, or contact us at support@thetspace.com.

EU/UK (GDPR): You may also lodge a complaint with your local data protection authority.

California (CCPA): We do not sell personal information. You may request disclosure of categories of data collected.

7. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS) and at rest. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

8. International transfers

TSpace is operated from the United Kingdom. Your data may be processed in the UK, the US, or other countries where our service providers operate. We ensure appropriate safeguards (e.g. UK adequacy decisions, Standard Contractual Clauses) for transfers outside the UK/EEA.

9. Sub-processors

We use the following service providers to operate our platform:

• Supabase – Database, authentication, storage (US)
• Stripe – Payment processing (US)
• PostHog – Product analytics, when you accept analytics cookies (US)
• Vercel / Railway – Hosting (as applicable)

We have data processing agreements with these providers where required by law.

10. Children

Our services are not intended for users under 16. If you are under 16, please do not create an account. If we learn we have collected data from a child under 16, we will delete it.

11. Changes

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use after changes constitutes acceptance.

12. Contact

Questions? Privacy and billing: support@thetspace.com.