Privacy Policy
Last Updated on December 29, 2025
Introduction
Lüthi Digital Solutions ("TradeStats", "We", "Us") takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations—specifically the Swiss Federal Act on Data Protection (FADP) and, where applicable for users in the European Union, the General Data Protection Regulation (GDPR).
This Privacy Policy explains what data we collect when you use our website and software, why we collect it, and how we use it.
Controller (Responsible Party)
The party responsible for data processing on this website is:
Lüthi Digital Solutions Weiherstrasse 35 4416 Bubendorf Switzerland
Email: info@trade-stats.com
Data We Collect
3.1 Account Information When you register for an account or sign up for a free trial, we collect:
Full Name or Username
Email address
Encrypted Password (we do not have access to your actual password)
3.2 Trading Data ("User Content") To provide our journaling service, we process the data you upload or import. This includes:
Trade history (entry/exit prices, dates, symbols, volume)
Screenshots of charts
Personal notes, tags, and strategies
Brokerage import files
3.3 Payment Information We use Stripe (Stripe, Inc.) as our payment processor.
We do not store your full credit card number or CVC on our servers.
We only store a reference token (Customer ID) to manage your subscription, free trial status, and recurring billing.
Stripe processes your payment data independently. You can find their privacy policy at: https://stripe.com/privacy.
3.4 Usage Data & Logs When you access our services, our servers automatically create log files. This data includes:
IP address
Browser type and version
Operating system
Referrer URL
Date and time of the server request
Purpose and Legal Basis for Processing
Contractual Necessity (Art. 31 para. 2 lit. a FADP / Art. 6 para. 1 lit. b GDPR): To provide the TradeStats software, manage your account, process imports, and handle billing/subscriptions.
Legal Obligation: To comply with tax and accounting laws (e.g., retaining payment records for 10 years).
Legitimate Interest: To improve our software, detect bugs, ensure security, and prevent fraud or abuse of the free trial system.
Consent: If you explicitly sign up for a newsletter or marketing emails (you can opt-out at any time).
Data Sharing and Third Parties
We do not sell your personal data. We only share data with trusted third-party service providers ("Processors") necessary to operate our business. These include:
Hosting & Infrastructure: Google Firebase (provided by Google LLC) to host our database, authentication services, and application data.
Payment Processing: Stripe (for payments and subscription management).
Email Services: Providers used to send transactional emails (e.g., password resets, invoices).
Analytics: Tools to understand website usage (e.g., Google Analytics), using anonymized data where possible.
We ensure that these providers adhere to strict data protection standards. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF) and the Swiss-U.S. Data Privacy Framework, ensuring adequate protection for data transfers to the USA.
Data Security
We use SSL/TLS encryption for all data transmission to protect the confidentiality of your personal content. We implement technical and organizational measures to protect your data against manipulation, loss, destruction, and unauthorized access.
Cookies and Tracking
We use cookies to enhance your experience.
Essential Cookies: Necessary for login, authentication, and security (cannot be disabled).
Analytics Cookies: Help us understand how users interact with the site. You can control these via your browser settings or our cookie consent banner.
Your Rights
You have the following rights regarding your personal data:
Right of Access: You can request information about your stored data.
Right to Rectification: You can request the correction of incorrect data.
Right to Deletion ("Right to be Forgotten"): You can request the deletion of your account and data, provided there are no legal retention obligations (e.g., tax laws).
Right to Data Portability: You can request to receive your data in a structured, common format.
Right to Revoke Consent: You can revoke any given consent (e.g., for newsletters) at any time.
To exercise these rights, please contact us at info@trade-stats.com.
Data Retention
We retain your personal data only for as long as necessary:
Account Data: Stored until you delete your account.
Payment Records: Stored for 10 years due to Swiss tax and accounting laws.
Backups: Deleted automatically on a rolling schedule.
International Data Transfers
Since we are based in Switzerland, your data is primarily processed here. If data is transferred to countries without an adequate level of data protection (e.g., certain non-EU countries), we ensure compliance through recognized legal mechanisms (such as Standard Contractual Clauses).
Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page.