Privacy Policy

Last Updated: February 3, 2023

1. Introduction and Scope

Welcome to Dhadu ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal and financial data. This Privacy Policy explains how Dhadu collects, uses, stores, and protects information when you access our web application, website, and related services (collectively, the "Platform").

CRITICAL NOTICE – NATURE OF SERVICE: Dhadu is strictly a trading journal, analytics, and portfolio management tool. We are not a brokerage, financial exchange, investment advisor, or trading platform. We do not hold client funds, execute trades on financial markets, or offer investment advice. Any trading data you input or sync is for analytical and educational purposes only.

By accessing or using Dhadu, you consent to the practices described in this policy. If you do not agree with this policy, please do not use our Platform.

2. Information We Collect

We collect information to provide our analytics services, improve your trading discipline, and manage your account. This data falls into the following categories:

A. Personal Information (Provided by You)

Account Registration: When you sign up, we collect your email address, username, and encrypted password.
Profile Data: You may optionally provide a profile picture, bio, and trading preferences (e.g., "Forex Scalper," "Crypto Swing Trader").
Support Communications: Records of your interactions with our support team, including tickets submitted via our Help Desk.

B. Trading and Financial Data (Your Journal)

The core function of Dhadu is to analyze your trading performance. We collect:

Trade Records: Entry/exit prices, timestamps, asset symbols (e.g., EUR/USD, BTC), position size, and P&L data.
Broker Synchronization: If you use our "Broker Sync" or "Auto-Import" features, we process read-only trade history data via API keys or CSV uploads you provide. We never access your withdrawal rights or execute trade privileges.
Journal Entries: Text notes, screenshots of charts, and emotional tags (e.g., "Fear," "Greed") you associate with specific trades.
Portfolio Configuration: Information about your accounts (e.g., "Main Forex Account," "Challenge Account") and balance history.

C. Automated & Usage Data

Device Information: IP address, browser type, operating system, and device identifiers to assist with security and debugging.
Usage Logs: Data on how you interact with the dashboard, which analytics modules you use (e.g., Position Calculator, AI Coach), and time spent in "Focus Mode."
Cookies: We use session cookies to keep you logged in and preference cookies to remember your settings (e.g., Dark Mode, Chart Layouts).

D. Payment Information

We use Stripe, a third-party payment processor, to handle all billing. Dhadu does not store your full credit card number or bank account details on our servers. We only retain a payment token and transaction history (subscription status, billing date) provided by Stripe.

3. How We Use Your Information

We use the data we collect for specific business purposes:

Service Delivery: To calculate your Win Rate, Profit Factor, Drawdown, and other performance metrics in real-time.
AI Trading Coach: To generate personalized insights. When you ask the AI Coach questions or request analysis of your journal, anonymized data snippets may be processed to provide the response.
Platform Improvement: Analyzing aggregate usage trends (e.g., "Which indicators are most popular?") to build better features.
Security & Fraud Prevention: Monitoring for suspicious login activity (e.g., multiple failed attempts) to protect your account.
Community Features: Displaying your username and shared charts if you choose to post in the "Discover" feed or public leaderboards.

4. Data Sharing and Disclosure

We do not sell your personal data or trading history to third parties. We only share information in the following strict circumstances:

Service Providers: We trust verified third-party vendors to help run our Platform, including:
Cloud Hosting: (e.g., AWS/Google Cloud) for secure data storage.
Payment Processing: (Stripe) for subscriptions.
AI Processing: (e.g., OpenAI) to power the "AI Coach" feature. Data sent to AI providers is strictly for generating responses and is not used to train their public models.
Legal Compliance: We may disclose information if required by law, such as a subpoena or court order, or to protect our rights and the safety of our users.
Business Transfers: If Dhadu is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that deal, subject to confidentiality agreements.

5. User Data Rights & Privacy Controls

You have control over your data:

Private by Default: Your trading journal, portfolio balance, and specific trade notes are private. They are not visible to other users unless you explicitly choose to share a trade to the Community/Discover feed.
Access & Correction: You can view and edit your personal data and trade history directly within the "Settings" and "Journal" sections.
Data Export: You may export your trade data (CSV/Excel) at any time via the Export feature (availability depends on your Plan).
Account Deletion: You have the right to delete your account. This can be done in Settings > Account > Danger Zone. Upon deletion, your personal data and trade history are permanently removed from our active databases.

6. Security Measures

We employ industry-standard security practices to protect your data:

Encryption: All data in transit is encrypted via 256-bit SSL/TLS (HTTPS). Sensitive data at rest is encrypted in our database.
Access Controls: Internal access to user data is strictly limited to authorized engineering and support staff on a "need-to-know" basis.
SOC 2 Compliance Alignment: We design our infrastructure and security policies to align with SOC 2 standards for security, availability, and confidentiality.

7. Third-Party Links and Integrations

Our Platform may contain links to third-party websites (e.g., Broker sites, TradingView). We are not responsible for the privacy practices of these external sites. When you sync a broker account, you are subject to that broker's own privacy policy and terms regarding API usage.

8. International Data Transfers

Dhadu operates globally. If you access the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the US or other regions where our servers are located. By using the Platform, you consent to this transfer.

9. Children's Privacy

Dhadu is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our features or legal requirements. We will notify you of significant changes via email or a prominent notice on the Dashboard. Your continued use of Dhadu after such changes constitutes acceptance of the new policy.

11. Contact Us

If you have questions about this Privacy Policy or your data rights, please contact our Data Protection Officer at:

Email: support@dhadu.com