Privacy Policy.

What we collect to run your account

Your email address and name, a hashed password (we never store the password itself), the MT5 trading history you import, and anything you write in your journal — notes, tags, confluences and screenshots. We also record each sign-in with its time, IP address and browser, which is how we detect someone else getting into your account.

Legal basis: performing our contract with you, and our legitimate interest in keeping accounts secure. This processing is necessary — you cannot use the product without it.

What we collect to improve the product

If you agree, we record which pages you open and which features you use — for example that an import finished, that a chart was filtered, or that a plan page was viewed. Each of these carries your plan, language, device type and how long you have been a user. We also record where you first arrived from, including any campaign parameters in the link you clicked.

Legal basis: your consent. You are asked once, you can decline, and you can change your mind at any time in Settings. Declining does not limit any feature.

If you link an MT5 account with its investor password

This is optional — you can always upload statements instead. When you link an account, the login number, server name and the investor (read-only) password you enter go straight to MetaApi (metaapi.cloud), a service that logs in to MetaTrader on our behalf and processes data on servers in the United Kingdom. MetaApi keeps the password so it can log in each time new trades are brought up to date; BetterTradeJourney never stores it — not in our database and not in our logs. Through that read-only login MetaApi reads your account information, your trade history and the price candles around your trades, and passes them to us. An investor password cannot open, close or change a position and cannot withdraw money; if the password you enter can trade, we refuse it and delete it from MetaApi straight away.

Legal basis: performing our contract with you, at your request. Linking is optional, and your data goes to the United Kingdom only if you choose it. Turning the link off, deleting the account, or changing the investor password in MT5 ends MetaApi's access immediately.

What we never do

We do not sell your data. We do not use your trades to train machine-learning models ourselves, and we do not share your trading history or journal with anyone except the service providers described below. We do not run third-party advertising or tracking pixels. Our staff can only open your account through an audited support session that is recorded against their name.

Who else processes it

Stripe handles payments and holds your billing details — we never see or store your full card number. Our hosting and database run on Railway. If you use the AI assistant, your question and a summary of your trading (figures such as trades, P&L and win rates) are sent to Google, in the United States, to generate a reply. Before anything is sent we remove what identifies you: your name, email, account numbers and ticket numbers are never sent, your accounts are labelled "Account 1, 2…", and email addresses, phone numbers and ID numbers are stripped from anything you type. Images you attach are sent as they are. The model runs on Google's free tier, under which Google may use what is sent to improve its products. If you don't use the assistant, none of your data goes to Google. If you link an MT5 account, MetaApi processes it as described above.

How long we keep it

Your account data and trading history are kept for as long as your account exists. Product-analytics events and sign-in history are kept for up to 13 months, so we can compare one year against the next. Error logs are kept for 180 days, and raw payment-provider event records for 90 days. Deletion runs automatically on a schedule — it is enforced, not merely promised. If you link an MT5 account, the link (login number and server name) is kept until you turn it off or delete the account; at that point it is also removed from MetaApi together with the password MetaApi holds, and the price candles fetched for that account are deleted. Records of each update attempt are kept for 90 days.

Your rights

Under Thailand's Personal Data Protection Act you may ask us for a copy of your data, ask us to correct it, ask us to delete it, withdraw your consent to analytics, or object to how we use it. Write to the address below and we will respond within 30 days. When an account is deleted, its analytics history is de-linked from the person rather than kept against their name.

Cookies

We use a session cookie to keep you signed in, a cookie recording your analytics choice, and a language preference cookie — these are necessary and always set. If you have agreed to analytics, we also set a cookie that remembers where you first arrived from. Referral links set a cookie so the person who recommended us gets credit. We use no advertising cookies.

Contact

Questions, requests or complaints: support@bettertradejourney.com. If you are not satisfied with our response you may complain to Thailand's Personal Data Protection Committee.