Privacy & GDPR

1. Who we are

SYNAPSE (synapse-trading.com) is the data controller for the personal data described here. Contact: privacy@synapse-trading.com.

2. What we collect

• Account data: email address, name if you provide one, password hash, and the sign-in provider if you use Google or Apple.
• Journal data: the trades, tags, notes and screenshots you enter, and the starting capital of each account.
• Billing data: subscription status and the last four digits and brand of your card. Full card numbers are handled by Stripe and never reach our servers.
• Affiliate data: referral codes, click events, and your payout email address.
• Jundiee conversation data: the messages you send to the Jundiee assistant, together with a numerical summary of the journal for the account you have open at the time — net result, win rate, largest drawdown, discipline score, recent emotion tags and any active behavioural flags. Individual entries, notes and screenshots are not sent.
• Technical data: a hashed, salted derivative of your IP address for click deduplication and abuse prevention. The salt rotates daily and we do not retain raw IP addresses for analytics.

3. Why we process it, and on what basis

• To provide the service you subscribed to — performance of a contract.
• To take payment and prevent fraud — contract and legitimate interests.
• To send transactional email (verification, trial reminders, receipts) — contract.
• To send marketing email — only with your consent, withdrawable in one click.
• To answer your messages to the Jundiee assistant — performance of a contract, since the assistant is part of the service you subscribed to.
• To meet accounting and tax obligations — legal obligation.

4. Who we share it with

Processors only, each under a data processing agreement: our hosting provider, our database provider, Stripe for payments, our transactional email provider, and the AI provider that powers the Jundiee assistant. We do not sell personal data and we do not share it with advertising networks.

5. The Jundiee assistant

Jundiee is powered by a third-party AI provider. When you send a message, that message, the earlier messages in the same conversation and the numerical journal summary described in section 2 are transmitted to that provider so it can generate a reply. Your name, email address and payment details are never included.

Depending on the provider and plan in use at the time, the content you send may be retained by that provider and used to develop and improve their models. We state this plainly so you can decide what to type. If you would rather a detail stayed only in your own records, keep it out of the chat — the journal itself is stored on our own infrastructure and is not sent anywhere for model development.

The assistant does not make decisions that produce legal or similarly significant effects for you. It has no market data, gives no investment advice, and nothing it says is a recommendation to buy, sell or hold anything. It comments only on the behavioural patterns in your own log.

You can use SYNAPSE fully without ever opening the chat; every other feature works independently of it. You may ask us to delete your conversation history at any time by writing to privacy@synapse-trading.com, and we will also pass your request on to the provider where their terms allow it.

We keep the identity of our current AI provider and the details of that arrangement available on request. Where the provider processes data outside the EEA, the transfer relies on an adequacy decision or Standard Contractual Clauses, as set out in section 6.

6. Where it is stored

Primary storage is in the EU. Where a processor transfers data outside the EEA, that transfer relies on an adequacy decision or Standard Contractual Clauses.

7. How long we keep it

Jundiee conversations are held in your browser for the duration of the session and are not stored on our servers after the reply is delivered. Retention by the AI provider is governed by that provider's own policy. Account and journal data are kept while your account is open and for 30 days after deletion, after which they are erased from live systems and purged from backups on the normal backup rotation. Invoicing records are retained for the period required by tax law.

8. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interests. Export is available in-app at any time as CSV or JSON. To exercise any other right, email us; we respond within one month. You may also complain to your national supervisory authority.

9. Cookies

We set a session cookie so you stay signed in, and a referral cookie (sy_ref, 60 days) so an affiliate is credited correctly. Both are strictly necessary for the functions you have requested. We do not use advertising or cross-site tracking cookies.

10. Security

Passwords are hashed with scrypt and a per-user salt. Sessions are signed and HTTP-only. Payment card data never touches our infrastructure. Access to production data is limited to personnel who need it.