Privacy Policy
Encrypted at Rest
Full AES-256 Database Encryption
Payment Isolation
Direct PayPal Server Integration
Introduction
EliteFlowJournal is committed to protecting your privacy. This Policy explains how we collect, use, and safeguard your information. By creating an account, you agree to the practices described herein.
Information Collection
We collect identifiers (name, email, hashed password), execution metadata (trade history, notes, performance stats), and technical data (IP address, device, and browser). If broker accounts are connected, we only store read-only identifiers.
Payment Processing (PayPal)
All subscription payments are processed via PayPal. EliteFlowJournal stores the PayPal subscription identifier, billing status, plan, and relevant billing period dates so we can provide and reconcile access. We do NOT collect or store full card details. Your financial data is handled directly by PayPal and is subject to their Privacy Policy (paypal.com/privacy).
Technical Data Security
Our infrastructure uses encryption at rest and in transit and implements Row-Level Security (RLS) to isolate your data from other users.
Visual Asset Protection
Uploaded charts or screenshots are stored in private buckets. Access is granted through temporary signed URLs that expire automatically. When a chart is replaced or its trade is deleted, the attachment is queued for deletion. Permanent account deletion verifies removal of private attachments before removing the sign-in identity.
How We Use Data
We use data to operate the Service, provide analytics, process payments, prevent fraud, and maintain security. We do not sell your personal data or proprietary strategy information.
Data Retention & Deletion
We retain data while your account is active and as required for legal or operational purposes. Account settings provide a structured export of your account and journal records. Permanent account deletion first cancels linked PayPal billing, then removes private chart attachments, journal records, profile data, and your sign-in identity. Required steps are checked and failed deletion attempts can be retried. We may retain a minimal operational audit record of a deletion attempt, without journal content, and any records required by law. For additional data requests, contact support at support@eliteflowjournal.com.
Cookies
We use essential cookies to maintain secure sessions and provide core functionality. We do not use marketing or third-party tracking cookies.
Your Legal Rights (GDPR)
If you are in the EEA/UK, you have rights to access, correct, delete, restrict, or port your data, and to object to certain processing. You may also lodge a complaint with your local data protection authority. For requests, contact support@eliteflowjournal.com.
Legal Basis & Processors
Our legal bases include contract performance (providing the Service), legitimate interests (security and fraud prevention), and compliance with legal obligations. We use trusted processors, including Supabase (data hosting) and PayPal (payments).
International Transfers
If your data is transferred outside your country, we rely on appropriate safeguards such as standard contractual clauses or equivalent protections provided by our processors.
Compliance Authority
Advanced Data Isolation Protocol
EliteFlowJournal is strictly intended for individuals aged 18 and over. We do not knowingly collect or process data from minors.