Legal
TradeClip Privacy Policy
Last updated Version privacy-2026-09-05
- Who we are
- TradeClip by TerraTrade LLC, a Florida limited liability company ("TradeClip", "we", "us")
- Contact
- support@terratrade.app
- Registered address
- TerraTrade LLC, 104 NW 17th Street, Apartment 156-3, Gainesville, Florida 32603, United States
This policy explains what TradeClip collects, why, where it is stored, how long we keep it and what you can do about it. It covers the TradeClip desktop app, the website at https://tradeclip.ai, the customer dashboard and the API at https://api.tradeclip.ai. It is written to be read, not skimmed; every statement in it corresponds to a control in our data inventory and retention schedule, and we will update it before we change what we do.
1. The short version#
- Recording happens on your computer. TradeClip captures the window you choose, detects trades from the pixels on screen, and saves clips to your disk. It never connects to your broker, never places or changes an order, and never uploads a live recording.
- Your account uses the network. Signing in, checking your license and plan, and counting clips against your allowance are online operations. The signed-in desktop also records detected trade starts, exits and completed exports with the observed trade details, export settings and delivery IP address. These first-party activity records are separate from optional cloud media sync.
- Cloud features are opt-in. Sync to Cloud adds the clips you choose to your cloud library; uploading webcam and microphone tracks there is a separate choice. Cloud Rendering separately uploads finished-trade recording segments, any recorded camera/audio tracks and edit instructions for temporary processing, even when Sync to Cloud is off or those tracks are muted or hidden in the export. The finished export downloads to your computer.
- We do not sell your data, do not show ads, do not share your clips with other users, and do not use your clips to train models.
- You can delete your clips, your cloud library and your account. The exceptions (financial records, security logs, and a one-way fingerprint of your email that stops the free trial being reused) are listed below.
2. What TradeClip does on your computer#
The desktop app reads the pixels of the one window you select (typically a TradingView chart) and keeps footage around the trades it can see. In the default on-trade mode it starts writing video only when it detects an entry; in optional rolling mode it keeps a short buffer on disk so a clip can start before the entry.
From the screen it reads, TradeClip extracts trade facts: the ticker symbol, the direction (long/short), the open and close times, and the profit or loss shown on the chart. These, together with the clip video, thumbnails, your edits, layouts and exports, are stored under ~/Movies/TradeClip/Clips/ (or the folder you choose) and in the app's local settings folder.
If you grant the permissions, TradeClip can also record your microphone and webcam into a clip. These permissions are requested by the operating system, are off until you grant them, and can be revoked in your system settings at any time. Camera and microphone content stays on your computer unless you explicitly enable uploading it (section 5).
The signed-in app sends the observed trade facts described in section 3. Recordings, raw OCR text and local file paths are not part of these activity events. The app does not contain third-party analytics code.
3. Information we collect when you have an account#
| What | Why | Legal basis (where one is required) |
|---|---|---|
| Email address, password (stored only as a salted Argon2id hash), first and last name, username | To create and secure your account, send you verification and security email, and show your name in the app | Performance of our contract with you |
| Which version of the Terms and this policy you accepted, and when | Proof of agreement | Legal obligation / legitimate interest |
| Session information: a random session identifier, the type of client (browser or desktop), your operating system and app version, and the network prefix (not the full address) you signed in from | To keep you signed in, show you a list of your devices, and detect stolen sessions | Contract; legitimate interest in security |
| Desktop installation identifier (a random value generated on your computer, not a hardware serial) | To bind your license to one active installation and to rate-limit abuse | Contract |
| License key (stored only as a one-way keyed digest plus a masked display form) and activation history | To prove your right to use the software on the installation you chose, and to replace a key through support | Contract |
| Clip-count records: an opaque clip identifier, the capture time and whether the clip was finalized | To enforce your plan's clip allowance (10 lifetime clips on the trial, 40 per month on Pro, 200 per month on Ultra). No video, ticker, direction or profit/loss is included | Contract |
| Trade and export activity: ticker, direction, observed entry/exit, take-profit and stop-loss prices or amounts, quantities, P&L and unit, detection confidence, trade times; export quality, requested and actual dimensions, frame rate, duration, file size, encoding settings and completion time; account/installation IDs and server-resolved delivery IP | First-party product metrics and account activity history. Missing observations remain unknown. Sent for signed-in desktop activity even when cloud media sync is off; queued locally while offline. Retained while the account exists, then deleted with the account | Service operation and product diagnostics |
| Support tickets: what you write to us, and any screenshots or files you attach | To help you | Contract; legitimate interest |
| Security and account activity log: sign-ins, password changes, license actions, support actions taken on your account, with request identifiers | To investigate fraud, abuse and security incidents, and to show you your own account history | Legitimate interest in security; legal obligation |
| Request logs on our servers: request identifier, route, timing, result, your full IP address and a shortened browser/app identifier | To operate the service and respond to abuse; kept 30 days | Legitimate interest |
We do not ask for your date of birth, physical address, or government identifiers. We never see or store your card number: payment details go directly to Stripe (section 7).
4. Billing information#
If you subscribe, Stripe collects your payment method, billing name, billing email and billing address on our behalf and sends us identifiers (customer, subscription and invoice IDs), the plan you chose, the status of each payment, and refund or dispute events. We keep a billing ledger of these events for seven years because tax and accounting rules require it. Your billing email at Stripe is separate from your TradeClip login email; changing one does not change the other.
Prices are shown excluding tax; applicable tax is calculated at checkout.
5. Cloud sync (optional)#
Cloud sync is off when you create an account. When you turn it on, you see a dialog that lists exactly what is sent; the same list is here.
Cloud rendering is a separate choice. When you enable it on a paid plan, finished-trade recording segments, any camera/audio tracks recorded in the clip, and edit instructions upload for temporary processing. These are original tracks, including audio muted or camera footage hidden in the final export, independently of your cloud-library media sync choices. The finished video downloads to your desktop. A lasting cloud-library copy is saved only when cloud sync is also enabled. Turning off cloud sync does not turn off cloud rendering. Temporary render files expire within seven days; local originals remain available for editing.
Sent when you sync a clip
- The finished clip video (the recording of the window you chose, after the trade ended).
- A thumbnail.
- The trade facts TradeClip read from your screen: ticker, direction, open and close times, and profit or loss as shown on the chart, together with a flag that says whether a value was actually observed or is unknown.
- Clip length, resolution and format, and any title, notes or tags you add.
- Exports you ask us to render in the cloud, and the edit description needed to render them.
Never sent
- The live recording buffer or anything captured before a clip is finished.
- Webcam or microphone tracks, unless you turn on "Include webcam and microphone tracks" in Settings or choose it for a specific clip.
- File paths, folder or user names, or any other data from your computer that is not part of the clip.
Where it is stored. Clips are stored in a private Google Cloud Storage bucket in the United States (us-east1), encrypted at rest, under an opaque account identifier. Object names contain no email address or username. Access is granted through short-lived signed links created only after we check that you are signed in and own the clip; there are no permanent public links.
Who can see it. You. TradeClip support can see that a clip exists, its state and its size. A support engineer can open a clip's content only when you ask for help with that specific clip, and each such access is recorded in the security log with the ticket reference.
Your clips are yours. We do not use them for advertising, do not share them with other customers, and do not use them to train machine-learning models. We process them only to store, search, thumbnail and (if you ask) render them.
Existing clips. Clips recorded before you created an account stay local unless you choose to upload them. Uploading them does not use your clip allowance.
6. Where your data is processed, and who helps us process it#
TradeClip runs on Google Cloud in the United States (us-east1). If you are outside the United States, your data is transferred there. The companies below process data for us under contracts that restrict them to our instructions:
| Subprocessor | What they do | Data they handle |
|---|---|---|
| Google Cloud (Google LLC) | Hosting (Cloud Run), file storage (Cloud Storage), secrets, logs, background jobs | Everything in sections 3–5 while it is being processed or stored, including cloud clips |
| MongoDB Atlas (MongoDB, Inc.) | Our database, hosted on Google Cloud | Account, session, billing, license, support, trade/export activity including delivery IP, and clip metadata (not the clip video files) |
| Stripe (Stripe, Inc.) | Payments, invoices, receipts, tax, the billing portal | Payment method, billing name/email/address, invoices; Stripe is an independent controller for the payment itself and has its own privacy policy |
| Google Workspace / Gmail SMTP (Google LLC) | Sending transactional email from support@terratrade.app and receiving your replies | Your email address, your name, and the content of lifecycle email (which never contains your password or an unmasked license key after issuance) |
We do not use advertising networks, data brokers or third-party analytics on sign-in, verification, password-reset or dashboard pages. If we add privacy-conscious analytics to the public marketing pages, it will not receive your email, tokens, license keys or any clip data, and this policy will be updated first.
We disclose data to authorities only when legally compelled, and we tell you when we are allowed to.
7. Email we send#
We send email you need to run your account: verification, password reset, security notices (new desktop sign-in, password changed, email changed), trial and plan status, quota warnings, payment failure and recovery, license issuance and replacement, support replies, and deletion notices. Stripe sends invoice and refund receipts. You can turn off non-essential mail (tips, product news) in Settings; security, billing and legal notices cannot be turned off while you have an account.
Email links that carry a one-time code expire quickly and work once. We never put those codes into logs or analytics.
8. Cookies and local storage#
The website uses one strictly necessary cookie, __Host-tc_session, which holds a random session identifier so you stay signed in. It is HttpOnly, Secure and not readable by scripts. We do not set advertising or tracking cookies. The desktop app stores your sign-in credential in your operating system's encrypted storage (macOS Keychain-backed safeStorage; Windows DPAPI), together with a cached copy of your plan so the app can keep working for up to 72 hours offline.
9. How long we keep data#
The full schedule is in our retention document; the headline values are:
| Data | Kept |
|---|---|
| Unverified sign-ups | 7 days, then deleted |
| One-time email codes | Until used or expired, plus 24 hours |
| Signed-out or expired sessions | 30 days, then deleted |
| Billing ledger (invoices, payments, refunds, disputes) | 7 years |
| Raw payment-event messages from Stripe | 90 days |
| Support tickets and attachments | 2 years after the ticket is closed |
| Security and account activity log | 2 years |
| Cloud clips | While your plan or trial is active, then 30 days after it ends (we email you first), or until you delete them |
| Unfinished uploads | 2 days |
| Temporary cloud-render files | 7 days |
| Server request logs (with IP address) | 30 days |
| Backups | Up to 35 days after the data is deleted from the live system |
| Deleted-account record (a one-way fingerprint of your email and the date your trial was used; nothing else) | Indefinitely (section 11) |
Data on your own computer is yours and is never deleted by us.
Trade and export activity retention#
The account owner can read their activity through the authenticated activity API. Operators can inspect it through an audited command that records their identity and reason. Activity details are not written to general application logs or sent to third-party analytics. activity_events are removed during account deletion; the local delivery outbox remains under the user's control. Deleting a clip does not erase its historical activity record. An IP address on an event is the address used when that event reached the API, which may be later than detection when the app was offline.
10. Deleting clips, your cloud library, or your account#
You control three levels of deletion in the app:
- Remove from this device moves the clip's files to your system Trash and leaves any cloud copy untouched.
- Delete cloud copy removes the clip from your cloud library immediately and deletes it from our servers within 24 hours. The copy on your computer stays. Cloud deletion cannot be undone.
- Delete everywhere does both, after one confirmation.
You can also delete every cloud clip at once from Settings.
Account deletion. In Settings, after confirming your password, you can delete your account. Deletion is scheduled 14 days later so you can change your mind; during that time your other sessions are signed out, new captures and uploads are blocked, and you can still export your data. If you cancel within the 14 days, nothing is deleted. When the period ends we:
- cancel any remaining subscription and delete your customer record at Stripe (Stripe keeps invoices under its own legal obligations);
- delete your cloud clips, thumbnails, exports and render files;
- delete your sessions, support tickets and attachments (unless a payment dispute is open), license records, trial usage records and settings;
- remove your email, name and username from our database;
- email you that deletion is complete — the last message we send you.
Deleting your account never deletes anything on your own computer.
What survives account deletion, and why
- The billing ledger and subscription history (7 years): tax and accounting law. It references you only by an opaque account number.
- The security and account activity log (2 years): to investigate fraud and abuse. It contains opaque identifiers and shortened network prefixes, not your name or email.
- The trial-reuse record described in the next section.
11. Free-trial anti-abuse#
The free trial is available once per person. So that a deleted account cannot be recreated to obtain another trial, we keep, after deletion, a one-way keyed fingerprint of your email address and the date the trial was used. The fingerprint cannot be turned back into your address and is used only to answer "has this address already had a trial?" when someone registers. We also apply rate limits by network address and installation identifier during registration and license redemption, and may ask you to complete a bot check when sign-up traffic looks automated. We do not build device fingerprints from hardware serials or browser characteristics, and we do not share these signals with anyone.
If you believe the anti-abuse controls have wrongly blocked you, write to support@terratrade.app; a person reviews these cases.
12. Your rights and controls#
Wherever you live, you can:
- See and correct your profile, email, devices, license, plan and billing history in the dashboard.
- Export your account data as a machine-readable file (Settings → Export personal data), and download your cloud clips.
- Delete clips, your cloud library, or your account (section 10).
- Sign out other devices and revoke a specific session.
- Turn cloud sync off at any time; already-uploaded clips stay in your cloud library until you delete them.
- Withdraw camera and microphone permission in your operating system.
- Opt out of non-essential email.
If you are in the EEA, UK, Switzerland, or a jurisdiction with similar rights (such as California), you also have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your data-protection authority. To exercise a right that the dashboard does not cover, email support@terratrade.app from your account email; we may ask you to confirm control of the account. We respond within 30 days.
13. Security#
We hash passwords with Argon2id, store email and license tokens only as keyed one-way digests, rotate sign-in credentials on every refresh and revoke a whole session family if a stolen credential is replayed, sign our own entitlement documents, verify every payment webhook signature, keep clip storage private with short-lived links, keep secrets in Google Secret Manager, and record every support action on your account in an audit log you can ask about. The desktop app runs its interface in a sandboxed renderer with no direct system access. No system is perfectly secure; if we learn of a breach that affects you, we will notify you without undue delay and, where required, within the legal deadline.
14. Children#
TradeClip is a tool for trading content and is not directed at children. You must be at least 18 years old (or the age of majority where you live) to create an account. We do not knowingly collect data from anyone younger; if you believe we have, contact us and we will delete it.
15. Not financial advice#
TradeClip records and organizes what is on your screen. It does not analyse your trading, does not give recommendations, and nothing produced by the app, the website or our support team is investment, financial, legal or tax advice.
16. Changes to this policy#
When we change what we collect, where we store it, who processes it or how long we keep it, we will publish the new version at https://tradeclip.ai/privacy with a new "Last updated" date and, for material changes, email you at least 14 days before they take effect. Continuing to use TradeClip after that date means the new version applies; if you disagree, you can delete your account first. Older versions are available on request.
17. Contact#
TradeClip by TerraTrade LLC Email: support@terratrade.app Address: 104 NW 17th Street, Apartment 156-3, Gainesville, Florida 32603, United States
