Privacy Policy

1. What we collect

When you use Reforge we collect the information you provide directly:

• Account information — email address and password (stored hashed)
• Trade journal data — dates, markets, prices, PnL, emotional states, notes, and setup tags
• Screenshots you upload as part of trade entries
• AI Mentor conversations — messages you send and responses received
• Session and usage metadata — timestamps, feature usage counts

2. How we use it

Your data is used only to provide the Reforge service:

• Storing and displaying your trade journal
• Generating AI-powered coaching via AI Mentor (with your consent)
• Calculating statistics shown on your Intelligence Hub
• Securing your account and preventing abuse

We do not sell your data. We do not use it for advertising.

3. Third-party processors

We use the following sub-processors:

4. Data retention

Your data is retained for as long as your account is active. You can export all your trade data at any time from Settings. You can permanently delete your account and all associated data from Settings — this is irreversible.

5. Your rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access — export all data we hold about you (Settings → Export data)
• Erasure — delete your account and all data (Settings → Delete account)
• Portability — receive your data in a machine-readable format (CSV export)
• Rectification — edit any data in your journal directly
• Restriction — contact us to restrict processing
• Objection — contact us to object to any specific processing

6. Security

All data is encrypted in transit (TLS). Screenshots are stored in a private bucket and are only accessible via short-lived signed URLs. Passwords are hashed and never stored in plaintext. We follow Supabase's Row Level Security model — each user can only access their own data.

7. Contact

For any privacy questions or requests, contact us at mike@apeventures.lol.