Privacy Policy

Last updated: 9 November 2026

This explains what personal data The Execution Log collects, why, who we share it with and the choices you have. Your trading journal is private, and we treat it that way.

Who is responsible for your data

The Execution Log is run by [your full legal name], a sole trader trading as The Execution Log, of [a UK postal address], United Kingdom. Email: support@theexecutionlog.com. We are the "controller" of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018).

What we collect

• Account details: your name, email address and password. Passwords are stored in hashed (scrambled) form by our login provider. We can't see them.
• Profile answers: optional details you give during setup, such as country, trading experience and style.
• Your journal: trading accounts, trades, imports, notes, goals, reviews and screenshots you add.
• Billing details: your plan, payment status and billing history. Card payments are handled by Stripe. We never see or store your full card number. Stripe tells us a card "fingerprint" (a code that identifies a card without revealing its number) so we can limit free trials to one per card.
• Phone number: only if we ask you to verify one, to prevent duplicate free-trial accounts.
• Notification settings: if you turn on push notifications, your browser gives us a technical address to send them to.
• AI coach messages (Elite): the questions you ask and the journal figures needed to answer them.
• Technical data: IP address, browser type and log records needed to keep you signed in, keep the service secure and fix problems.

Why we use it, and our legal basis

• To provide the service you signed up for: your account, journal, sync between devices, billing and account emails (confirmation, password reset, welcome, billing). Legal basis: contract.
• To keep the service secure and prevent abuse, including fraud and repeat free trials. Legal basis: legitimate interests.
• To send reminders and push notifications you've turned on. Legal basis: consent. You can turn them off any time in Settings.
• To keep financial records as tax law requires. Legal basis: legal obligation.
• To improve the service, using support conversations and aggregated, non-identifying information. Legal basis: legitimate interests.

We don't sell your data, we don't use your trades for advertising, and we don't make automated decisions about you that have legal or similarly significant effects.

Who we share it with

We use trusted providers ("processors") who only handle data on our instructions:

• Supabase: database, file storage and login. Our database is hosted in London.
• Vercel: website hosting.
• Stripe: payments and subscriptions.
• Resend: sending account emails.
• Twilio: sending phone verification codes, if phone verification is in use.
• Anthropic: powering the AI coach on the Elite plan. Only what's needed to answer your question is sent.
• Your browser's push service (for example Apple or Google): delivering notifications you've turned on.

We may also share data if the law requires it, or to protect our rights and users' safety.

International transfers

Some of these providers are based in, or use services in, the United States or elsewhere outside the UK. Where data leaves the UK, we rely on protections recognised by UK law, such as the UK–US data bridge, adequacy regulations or the UK International Data Transfer Agreement.

How long we keep it

• Your journal and account: until you delete them or close your account.
• Billing and tax records: as long as the law requires (normally 6 years).
• Free-trial card fingerprints: kept to prevent repeat trials, without your card details.
• Technical logs: short periods, usually a few weeks.

How we protect it

Data is encrypted in transit (HTTPS). Each user can only reach their own journal: this is enforced by database security rules, not just the app. Screenshots are stored privately. Payment details stay with Stripe. No system is perfectly secure, so please use a strong, unique password.

Your rights

You can export or delete your journal at any time from Settings → Data & privacy. You also have the right to:

• get a copy of your personal data;
• have it corrected or deleted;
• object to, or ask us to restrict, how we use it;
• receive it in a portable format;
• withdraw consent (for example, for notifications) at any time.

Email support@theexecutionlog.com to use any of these rights. We'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to sort it out first.

Cookies

We only use cookies and similar storage that are needed to keep you signed in and remember your settings. No advertising or tracking cookies. See our cookie policy.

Children

The Execution Log is for adults. We don't knowingly collect data from anyone under 18.

Changes

If we change this policy in a way that matters, we'll update the date at the top and, for significant changes, email you.