Legal
Privacy Policy
What we collect, who processes it, and how to ask for access or deletion.
Effective 20 September 2026
Who we are
This Privacy Policy explains how ReadChart (“we”) handles personal data when you use https://readchart.app and related services.
Privacy requests: support@readchart.app.
Data we collect
Account: email address, optional display name, authentication session.
Product: journal and trade records you create or that sync from your terminal, EA/bridge connection metadata (for example MT5 login, server, heartbeat), MCP API keys you generate, and support messages you send us.
Billing: Stripe customer and subscription identifiers, plan status, and trial usage. Card numbers are handled by Stripe, not stored on our servers.
Data we do not store
We do not store your MT5 password. The ReadChart EA runs on your terminal. Broker passwords stay with you.
How we use data
We use this data to operate the Service: sign you in, connect the bridge, show charts and journal, queue confirmed trades, bill subscriptions, send transactional email (including confirmation and welcome mail), and respond to support.
We do not sell personal data. We do not use third-party advertising or product-analytics pixels on the site today.
Processors
Supabase — authentication, database, and file storage.
Stripe — checkout, customer portal, and subscription billing.
Resend — transactional email (and, when configured, delivery of Supabase auth mail).
Optional infrastructure you enable with configuration (for example MetaApi or WhatsApp alerting) processes only what that feature needs.
MCP and AI providers
If you connect an MCP client, you send account, chart, and journal context to that provider (such as OpenAI or Anthropic). That processing is under their terms. Disable or disconnect MCP if you do not want that sharing.
Cookies
We use essential cookies and similar storage only: Supabase session cookies (typically named sb-*) to keep you signed in, and a short-lived HttpOnly redirect cookie (rc_auth_next) after login.
These are required for the Service to function. We do not set marketing or analytics cookies today, so we do not show a cookie banner. If that changes, we will update this section.
Retention
Account and journal data stay while your account is open. If you ask us to delete your account, we remove profile and product data we control, except records we must keep for billing, security, or law (for example Stripe invoices).
Your rights
You may request access, correction, export, or deletion of personal data we hold by emailing support@readchart.app from your account address. You may also close the account and revoke the EA at any time.
If you are in a region with additional privacy rights (for example the EEA, UK, or California), we will honour those rights where they apply. We do not sell or “share” personal information for cross-context advertising.
Security and children
We use HTTPS, access controls, and provider-side security. No method of transmission is perfectly secure.
The Service is not directed at children under 18. We do not knowingly collect their data.
Changes
We may update this policy. The version date at the top (2026-09-20) is current. Continued use after a posted change means you accept the updated policy.
Related: Terms of Service