Privacy Policy

Between is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform.

By using Between, you consent to the practices described in this policy. If you do not agree, please do not use the Service.

Information you provide:

• Account information: email address, display name
• Trade records: symbol, entry/exit prices, P&L, notes, tags
• Journal entries: mood ratings, written reflections, lessons learned
• Strategy configurations and rules
• Risk and display preferences

Information collected automatically:

• Usage data: pages visited, features used, session duration
• Device data: browser type, operating system, IP address
• Performance metrics: load times, error logs

We use your information to:

• Provide, operate, and maintain the Service
• Power the Bubble AI system with your trading context (per-user isolated)
• Generate performance analytics and insights
• Send transactional emails (account, billing, security)
• Improve the platform through aggregate usage analysis
• Comply with legal obligations

We do not sell your personal data or trading information to third parties.

The Bubble AI feature processes your trade history, journal entries, and settings to provide personalized cross-asset analysis. This context is:

• Isolated per user — enforced at the database level via Row-Level Security
• Not shared — your data context is never exposed to other users
• Processed by AI providers — prompts are sent to AI providers (Anthropic, OpenAI, or Google Gemini depending on your configuration) for processing. Each provider's privacy policy applies to those transmissions.
• BYOK (Bring Your Own Key) — Pro and Elite subscribers may provide their own API keys. When you use your own keys, your data is sent directly to that provider under your account and their terms.
• Not used for AI training — API access does not train on your data by default

Your data is stored in Supabase (PostgreSQL) with:

• Row-Level Security (RLS) ensuring data isolation between users
• Encryption at rest and in transit (TLS 1.2+)
• Regular automated backups
• SOC 2 compliant infrastructure (Supabase, Vercel)

No security system is 100% foolproof. We take commercially reasonable measures to protect your data but cannot guarantee absolute security.

Between uses the following third-party services:

• Supabase — database, authentication
• Vercel — hosting and CDN
• Anthropic / OpenAI / Google — AI processing for Bubble AI (varies by your AI settings)
• Polygon.io / Market data providers — real-time and delayed market data
• Stripe — payment processing (we never store payment card data)

Depending on your location, you may have rights to:

• Access — request a copy of your personal data
• Correction — correct inaccurate data
• Deletion — request deletion of your account and data
• Portability — export your trade and journal data (available in Settings)
• Objection — opt out of certain data processing

To exercise these rights, email privacy@betweentrades.com or use the data management tools in Settings → Account.

We retain your data for as long as your account is active. Upon account deletion:

• Personal data is deleted within 30 days
• Anonymized aggregate analytics may be retained
• Billing records are retained for 7 years as required by law

Between is not intended for users under 18. We do not knowingly collect personal information from minors. If you believe we have collected data from a minor, contact us immediately at privacy@betweentrades.com.

Between uses essential session cookies for authentication. We do not use tracking cookies or advertising pixels. You can disable cookies in your browser settings, but this may impact authentication functionality.

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.

Privacy inquiries: privacy@betweentrades.com