Privacy policy
Last updated 2026. This policy describes what the 3rader platform collects and why. It should be read with the terms of service.
1. Who is responsible
The data controller is [registered company name], [registered address]. Questions, and any request under section 7 below, go to support@3rader.com.
2. What we collect
You give us
- Account details — your name, email address and password. Your password is stored only as a salted hash and cannot be read back, by us or by anyone else.
- Optional profile details — display name, phone number, country, and a profile photo if you upload one.
- Payment information — what we receive is a transaction reference, the amount, the currency and a status. Card numbers and security codes go directly to our payment provider and never reach our systems.
We record automatically
- Session data — a signed cookie that identifies your session. It is required for signing in and cannot be turned off while you remain signed in.
- Operational logs — sign-in attempts and administrative actions, with the IP address they came from. Kept so an account compromise or an abuse pattern can be investigated after the fact.
We do not use advertising cookies, third-party analytics, tracking pixels or cross-site profiling. Nothing on this platform follows you elsewhere.
3. Why we hold it
- to create and secure your account, and to sign you in;
- to provide the analysis your plan covers;
- to take payment and to keep an accurate record of it;
- to send you service email — a receipt, a password reset, a change to your subscription;
- to detect and prevent abuse, fraud and unauthorised access;
- to meet our legal and accounting obligations.
4. Who else is involved
Three processors handle data on our behalf, each only as far as its job requires:
- Flutterwave — card payment processing. Your card details go to them, not to us.
- Resend — delivery of transactional email. They receive the recipient address and the message.
- Our hosting provider — the servers the platform and its database run on.
We do not sell your personal data, and we do not share it for anyone else's marketing.
5. How long we keep it
- Account records — while the account is open.
- Payment records — kept after an account is closed. Financial records are evidence that a payment was taken and what it bought, and deleting them would make a billing dispute unanswerable. Account deletion therefore removes your personal details from the active account while the transaction record itself is retained.
- Password reset links — single-use, and expire 30 minutes after they are issued.
- Operational logs — retained for a limited period, then discarded.
6. Security
Passwords are hashed, not encrypted. Session cookies are signed, HTTP-only, and same-site. Access to a page is decided on the server for every request, so hiding a link is never what protects a record. Payment records are settled only after the provider has confirmed the transaction on a server-to-server call, and webhooks are verified by signature.
No system is perfect. If a breach ever affects your data, we will tell you and the relevant authority as the law requires.
7. Your rights
Depending on where you live, you may have the right to ask for a copy of your data, to correct it, to have it deleted, to restrict or object to how it is used, and to receive it in a portable form. Write to support@3rader.com and we will respond within the period the law allows.
Some of it you can change yourself: your name, email, phone, country and photo are all editable from your profile page.
If you are unhappy with our response you can complain to your local data protection authority.
8. Transfers
Our processors may store data outside your country, including in the United States. Where data moves internationally we rely on the safeguards those providers put in place for it.
9. Children
The service is for adults. We do not knowingly hold data for anyone under 18, and will delete an account we find to be held by a minor.
10. Changes
If this policy changes in a way that affects you, we will give notice by email or in the platform before the change takes effect.