Privacy Policy

Last updated: 11 July 2026

This Privacy Policy is provided as a general template and does not constitute legal advice. We recommend having it reviewed by a qualified professional to ensure it fully reflects your data practices and legal obligations.

This Privacy Policy explains how Session Tool ("we", "us", "our") collects, uses, and protects your personal data when you use Session Tool at sessiontool.app (the "Service"). We are the data controller for the personal data described here. If you have any questions, contact us at help@sessiontool.app.

1.Data we collect

Category	Examples
Account data	Email address, display name/username, password (stored securely, hashed), profile avatar.
Your content	Trade journal entries, biases, session reviews, notes, statistics, and any community messages, direct messages, or shared media you post.
Subscription data	Your plan and subscription status. Payments are handled by Lemon Squeezy — we do not store your full card details.
Technical data	Device/browser information, approximate log data, and data stored locally on your device (for example, your journal cache and preferences in local storage).
Communications	Emails or messages you send us (e.g. support requests).

Content you post in community channels or other shared spaces is visible to other members according to access tiers — please treat it as shared rather than private.

2.How we use your data

to create and manage your account and provide the Service;
to store, sync, and display your trade journal and community content;
to operate community features (channels, direct messages, calls) and show member presence;
to process subscriptions and manage access tiers (via our payment provider);
to send you essential service emails (e.g. sign-up confirmation, password reset, important notices);
to provide support and respond to your requests;
to maintain security, prevent abuse, and enforce our Terms;
to improve and develop the Service.

3.Legal bases (UK GDPR / GDPR)

We process your personal data on the following legal bases:

Contract — to provide the Service you sign up for (account, journal, subscription).
Legitimate interests — to secure, maintain, and improve the Service, and to prevent abuse, balanced against your rights.
Legal obligation — where we must retain or disclose data to comply with the law.
Consent — where required (for example, any optional communications), which you can withdraw at any time.

4.Who we share data with

We do not sell your personal data. We share it only with service providers ("processors") that help us run the Service, under appropriate agreements:

Provider	Purpose
Supabase	Database, authentication, and hosting of your account and content.
Lemon Squeezy	Payment processing and subscription management (merchant of record).
Resend / email provider	Sending transactional emails (confirmation, password reset).
ImprovMX	Forwarding email sent to our support address.
TradingView & embedded media	Market data widgets, indicators, and embedded content you choose to view.

We may also disclose data if required by law, to protect our rights, or in connection with a business transfer.

5.International transfers

Some of our providers may process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards (such as standard contractual clauses or adequacy decisions) to protect your data.

6.Cookies & local storage

The Service uses your browser's local storage and similar technologies to keep you signed in, cache your journal so it works offline, and remember your preferences. These are essential to how the app works. We do not use third-party advertising cookies. Third-party embeds (e.g. TradingView, video streams) may set their own cookies when you view them, governed by their policies.

7.Data retention

We keep your personal data for as long as your account is active and as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we must retain certain records to comply with legal obligations (for example, limited payment records).

8.Your rights

If you are in the UK or EEA, you have the right to:

access the personal data we hold about you;
ask us to correct inaccurate data;
ask us to delete your data ("right to be forgotten");
restrict or object to certain processing;
request a copy of your data in a portable format;
withdraw consent where processing is based on consent.

To exercise any of these rights, email help@sessiontool.app. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

9.Security

We take reasonable technical and organisational measures to protect your data, including encryption in transit and access controls. No system is completely secure, so we cannot guarantee absolute security. Keep your login credentials confidential and let us know promptly if you suspect any unauthorised access.

10.Children

The Service is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

11.Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and, where changes are material, provide additional notice.

12.Contact

For any privacy questions or requests, contact us at help@sessiontool.app.