Legal

Privacy notice

How Trade Supreme handles personal information in the public site, Skool community, and Journal.

Responsible party

Trade Supreme is the responsible party for personal information processed through this site and Journal. Contact: hello@tradesupreme.ai.

[TO CONFIRM: legal entity name, registered address, and responsible party contact details]

Information Officer: [TO CONFIRM: name/contact]

Information we collect

Depending on how you use the service, we may collect identity and contact details, Skool membership and entitlement records, login and security data, device and usage information, support correspondence, and payment or billing status supplied by Skool. The Journal may contain trading data such as account metadata, symbols, timestamps, positions, prices, fees, notes, outcomes, and read-only MT5 connection details. It may also contain voice recordings, voice transcripts, reflections, moods, emotions, and mental-state information. Mood and mental-state information may be special personal information under POPIA and is processed only with explicit, separate consent. You can withdraw that consent at any time by emailing us and, once the setting is available, in the Journal settings. [TO CONFIRM: Journal consent setting shipped before launch]

Where information comes from

Most information comes from you. Some comes from others: Skool tells us your membership tier and status, and if you connect an MT5 account (MT5 auto-import is coming soon; until then no broker connection exists), your broker's MT5 server provides your account metadata and trade history through the read-only investor password you supply.

What is required and what is voluntary

  • Required: a username, a password, and your Skool membership status. Without them we cannot create or secure your Journal account.
  • Voluntary: email, trades, notes, voice recordings, mood and mental-state information, and MT5 connection details. If you do not supply them, the related features (for example voice debriefs, mood review, or auto-import) will not work, but the rest of the Journal will.
  • Consent-based: mood and mental-state processing and offshore AI processing. You can refuse or withdraw consent; the features that depend on it are then switched off.

Purposes and lawful basis

We use information to provision accounts, authenticate members, provide journaling and retrospective review, import read-only trade records, answer support requests, keep the service secure, measure service use, meet legal obligations, and administer Skool membership. We use consent where required, including explicit consent for mood or mental-state processing and offshore AI processing. We do not use the Journal to provide market instructions, advice, or execution.

Who receives your information

  • Trade Supreme operators and co-founders who run the service can see account metadata (username, tier, status, MT5 connection status, activity counts). They do not see Journal content through the operator console. One co-founder, KG, is employed by ATFX Africa as a broker; [TO CONFIRM: confirm no member information is shared with ATFX]
  • A coach you choose (coming soon): the VIP consented coach view will let a coach see Journal content only if you explicitly consent, and you can withdraw that consent at any time.
  • Service providers (operators under POPIA) listed below, who act on our instructions and must protect your information.
  • Authorities where the law requires it.

Service providers and countries

PurposeProviderCountry
Hosting (Journal, console, public site)[TO CONFIRM: VPS provider][TO CONFIRM: country]
Community, membership and billingSkool[TO CONFIRM: country]
AI review and voice transcription[TO CONFIRM: AI model providers, for example via OpenRouter][TO CONFIRM: countries]
Email and support[TO CONFIRM: email provider][TO CONFIRM: country]
Encrypted off-site backups[TO CONFIRM: backup provider][TO CONFIRM: country]

[TO CONFIRM: complete provider list, processing locations, and signed operator agreements]

Cross-border transfers and MT5 security

Where information is sent outside South Africa, we assess the recipient and use an appropriate POPIA section 72 basis, such as consent, contractual safeguards, or an adequate level of protection. The Journal does not request dealing authority. MT5 investor passwords are encrypted at rest, used only for read-only import, never logged, and are not used to place, change, or close trades.

Retention and security

We retain information only for as long as needed for the purposes above, legal obligations, dispute handling, security records, and the member relationship. [TO CONFIRM: retention periods for accounts, trade records, voice files, transcripts, and audit logs] We use access controls, encryption where appropriate, least-privilege operations, secure sessions, and incident response procedures. No online service can promise absolute security; we will notify affected people and the Regulator where required.

Your rights

Subject to applicable limits, you may ask for access, a copy or export, correction, deletion, restriction, objection, and withdrawal of consent. You may contact us at hello@tradesupreme.ai. We may need to verify your identity. You may complain to the Information Regulator of South Africa: inforegulator.org.za, POPIAComplaints@inforegulator.org.za, enquiries@inforegulator.org.za, 010 023 5200 or 0800 017 160. [TO CONFIRM: verify Regulator contact details against inforegulator.org.za before launch]

Direct marketing and automated decisions

We send direct marketing only if you opt in, and every message lets you opt out. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects; AI-assisted review produces reflections for you to read, not decisions about you.

PAIA manual

Our manual under the Promotion of Access to Information Act explains how to request records we hold. [TO CONFIRM: PAIA manual link]

Cookies

The public site uses no advertising or analytics cookies. The Journal uses a necessary session cookie for authentication and security only. We do not use it to track you across sites.

UK GDPR note

If you are in the UK, UK GDPR rights may apply, including access, rectification, erasure, restriction, portability, objection, and rights around automated decision-making. [TO CONFIRM: whether a UK representative is required and, if so, its name/contact] You may complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

Changes

We will publish changes here with a new update date. Material changes may also be communicated through the relevant member channel.