Privacy Policy
Last Updated: 23 July 2026
Introduction
This notice explains how trader-biz collects, uses and protects your personal data across our website, our app, and the services we provide.
"Personal data" means information that identifies you — your name, email address, the content of your support queries, and so on. Where data has been aggregated or anonymised so that you can't be identified, this notice doesn't apply.
We may update this notice from time to time. Where a change is significant, we'll let you know — usually by email.
Who we are
trader-biz is a trading name of AC Ballast Pty Limited, an Australian company headquartered in Australia. Registered office details are on our contact page. We build trading-journal software for solo traders: a place to track trades, analyse performance and improve consistency.
Our principles of data protection
Four principles sit at the heart of how we handle personal data.
Transparency: we are open and honest about what we collect and why.
Minimalism: we collect what the product needs and nothing speculative.
Security: we protect the data entrusted to us with appropriate technical and organisational measures.
Stewardship: we accept the responsibility that comes with holding your data.
What we collect
Information you give us. Your name and email address when you create an account; your communication preferences; the content of support requests and feedback; and posts you make in our subscriber community.
Your journal content. The trades, notes, journals and analysis you create in the app are your content. We store and process them solely to provide the service to you. We don't read, mine or share your journal content, and it is never used for marketing or analytics.
Payment information — which we don't hold. Payments are processed by Stripe. Your card and bank details go directly to Stripe and are never stored on our systems; we hold only what we need to manage your subscription, such as its plan and status.
Usage data, with your consent. With your consent, given through our analytics banner, we collect behavioural analytics: pages viewed, features used, progress through our signup flow, and the marketing campaign that first brought you to us. This can include session replays in which all text and inputs are masked — we never see what you type. If you decline, none of this is collected and the app works exactly the same. Our [Cookie Policy](/cookie-policy) lists every cookie involved.
We keep a record of the consent choice you make, including when you made it
and what you were asked, because we're required to be able to demonstrate
it. That record is itself personal data and is covered by this notice.
Technical data. Standard server logs (such as IP address and browser
type) collected when any service handles a request, kept for security and
troubleshooting.
A number you might give us. If you provide a mobile phone number — for
example, for two-factor authentication — we use it only for security and
account-service messages, never for marketing by us or anyone else.
Information about you entered by a subscriber. If a trader-biz
subscriber invites you to review their journal, they give us your email
address and we process it to deliver that invitation and manage the share.
Questions about it can come to us or to the subscriber who invited you.
We do not buy data about you, enrich your profile from third-party sources,
or collect data about you from data brokers.
How we use your data
To provide the service: operating your account, storing your journal, managing your subscription, and providing support.
To communicate with you: operational messages (security notices, changes to the service), replies to your requests, and — in line with the marketing preferences you control in your account settings — news about trader-biz. Every marketing email includes an unsubscribe link, and we honour it.
To improve the product: analytics as described above, only with your consent.
To keep the service safe: we use Google reCAPTCHA on our login and signup forms to detect automated abuse. reCAPTCHA is subject to the [Google Privacy Policy](https://policies.google.com/privacy) and [Google Terms of Service](https://policies.google.com/terms).
To meet legal obligations: such as tax and accounting requirements.
To produce aggregated statistics: we may publish or share anonymised, aggregated figures — for example, how many trades were journalled across the platform in a year. These cannot identify you, and once anonymised they fall outside this notice.
What we don't do: we don't sell your personal data, we don't use it for advertising, we don't share it with advertising networks, and we don't build advertising audiences from it.
Who we share it with
We share personal data only with the service providers who help us run
trader-biz, each limited to what their role requires:
| Provider | Role | Location |
| DigitalOcean | Hosting our application and database | Sydney, Australia |
| Stripe | Payment processing | United States |
| PostHog | Product analytics (only with your consent) | European Union |
| Mailgun | Email delivery | United States |
| Google | reCAPTCHA abuse protection | United States |
| Discourse | Our private subscriber community, if you choose to join it | Sydney, Australia |
We never share your mobile telephone number or SMS opt-in consent status with third parties for their own marketing purposes.
Beyond these, we disclose personal data only: to regulators, law enforcement or courts where required by law or to establish or defend legal rights (where possible and appropriate, we'll tell you first); to an actual or prospective buyer in connection with a sale or merger of the business; or to others with your consent.
International data transfers
We are an Australian company and our application data is hosted in
Australia. Some of our providers listed above process data in the United
States and the European Union.
If you are in the European Economic Area or the United Kingdom: transfers to
Australia and the United States are made under appropriate safeguards, such
as the European Commission's Standard Contractual Clauses or, for certified
US providers, the EU-US Data Privacy Framework. You can contact us for more
information about the safeguards applying to a specific provider.
Security
We take security seriously and apply appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls, and payment handling delegated entirely to Stripe. No system is perfectly secure, but protecting your data is a design requirement of ours, not an afterthought.
Retention
We keep your personal data for as long as you have an account with us, and afterwards only as long as we have a genuine need — for example, to meet legal, tax or accounting requirements. After that, it is deleted or anonymised. Withdrawing analytics consent stops collection immediately.
Your rights
Your personal data is yours. You can:
ask what personal data we hold about you, and have it corrected; request a copy of it; ask us to delete it, or to restrict or object to our processing of it; withdraw your analytics consent at any time from your account settings; and opt out of marketing at any time via the unsubscribe link in any marketing email or the communication preferences in your account settings.
To exercise any of these rights, contact us at [privacy@trader-biz.app] or via our contact page. We'll respond within a reasonable time frame, and within any time frame the law requires. If you're not satisfied, you can complain to your local data protection authority — in Australia, the Office of the Australian Information Commissioner (OAIC).
Contact us
Questions about this notice or your personal data: [privacy@trader-biz.app], or via our contact page. We prefer email — it gets you to the right person and gives us both a record.