Privacy

Who is responsible

Avendavi AB (org. no. 559582-9564) is responsible for the personal data described here. Contact: patrik@avendavi.com.

In short

Tradeshot works without an account, and we keep as little as we can. No ads, no third-party trackers, and your own images and videos never leave your device.

Everyone

• The trades you build are sent to our server only to fetch market data. They aren't stored unless you create a share link.
• A share link stores the trade's numbers (instrument, times, prices, stop and target if set; size, fees and margin only if the card shows P&L) and your replay settings, including your @handle, label and footer text. It's kept until the link expires or is deleted.
• A cookie called rt_device holds a random device id for a year, so we can count daily exports. Each export is recorded with that id, your plan, the type of export and a salted hash of your IP address (not the address itself), and kept for about 120 days.
• We count usage, such as a replay being built or an export finishing, without any device id, IP address or account attached.
• Like any website, our hosting provider logs requests, including IP addresses, to run and secure the service.

Paid accounts

• Your email address, plan, subscription status and renewal date, the themes you save and the share links you make.
• A login cookie keeps you signed in. Login links are emailed through Resend.
• Payment details go straight to our payment provider. We never see your card number.

Kept on your device

Your own background images and videos, your preferences, and, when you're logged out, your saved themes and the links you made stay in your browser. They're never sent to us.

Why we use it

To provide the service you ask for, and because we have a legitimate interest in keeping the free plan fair and the service secure (counting exports, hashed IP addresses, request logs).

Who helps us

• Vercel hosts the site.
• Turso stores our database.
• Resend sends login emails.
• Our payment provider handles subscriptions and payments.

Some of them may process data outside the EU. When they do, it's covered by the EU's standard contractual clauses or an adequacy decision such as the EU–US Data Privacy Framework.

How long we keep it

• Share links: until they expire or are deleted.
• Export records: about 120 days.
• Account data: while you have an account. When it closes we delete it, except what bookkeeping law requires us to keep (up to 7 years).
• Usage counts: 25 months.

Cookies

We only use cookies needed to run Tradeshot: rt_device for daily export limits, and login cookies for accounts. No advertising or analytics cookies.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by emailing patrik@avendavi.com. You can also complain to the Swedish Authority for Privacy Protection (IMY).

Changes

We may update this page. If a change matters for account holders, we'll email them first.