Privacy Policy

Version 2.1 · valid from 26 October 2026

This is a translation of the Czech version. In case of any discrepancy, the Czech version prevails.

Your data, and your trades in particular, are a sensitive matter. On this page we explain what personal data we process, why, for how long, to whom we disclose it and what rights you have. We comply with Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll., on the Processing of Personal Data (Czech Republic).

1. Who the controller is

We operate the website tradewio.com and the TradeWio application (app.tradewio.com). We have not appointed a data protection officer because we are not required to do so by law; please direct all enquiries to the e-mail address above.

2. What data we process and why

User account and trial version

• Data: name, e-mail, password (stored only in encrypted form), registration date and account settings.
• Purpose: creating and managing the account, providing the trial version and the service.
• Legal basis: performance of a contract – Art. 6(1)(b) GDPR.
• Retention: for as long as the account exists; after it is closed, we delete the data within 90 days.

Your trades and content in the application

• Data: trades and executions (symbol, prices, volume, fees, time), trading account and broker identification, statements you upload, notes, chart images, strategies, ratings in the daily journal. For automatic synchronisation, also an access key or token to the broker’s interface with read-only permission.
• Purpose: displaying and evaluating your trades, i.e. providing the service itself.
• Legal basis: performance of a contract – Art. 6(1)(b) GDPR.
• Retention: for as long as the account exists; after it is closed, we delete the data within 90 days. A trade or statement deleted in the application is also removed from backups within 30 days at the latest.

Broker access credentials are not used to place orders or to dispose of money; we use them solely to download your trades. You can revoke access at any time in the application or directly with your broker.

Subscription, payments and invoicing

• Data: name, or company name, Company ID, VAT ID and billing address, e-mail, selected subscription, payment history. Payment card data is processed directly by the Stripe payment gateway; we only see the card type and the last four digits.
• Purpose: accepting payment, recurring subscription payments, issuing tax documents.
• Legal basis: performance of a contract – Art. 6(1)(b) GDPR; bookkeeping and tax obligations – Art. 6(1)(c) GDPR.
• Retention: tax documents for 10 years from the end of the year in which they were issued (Czech VAT Act); other data for the duration of the subscription.

Customer support and communication

• Data: content of e-mails and messages you send us, and contact details.
• Purpose: handling your question, complaint or request.
• Legal basis: performance of a contract, or our legitimate interest in answering an enquiry – Art. 6(1)(b) and (f) GDPR.
• Retention: 3 years from the last contact.

News and commercial communications by e-mail

• Data: name and e-mail.
• Purpose: sending our users information about news in TradeWio and similar services.
• Legal basis: legitimate interest – Art. 6(1)(f) GDPR and Section 7(3) of Act No. 480/2004 Coll. (Czech Republic); for other persons only on the basis of consent.
• Retention: until you unsubscribe, at most 3 years from your last use of the service. You can unsubscribe via the link in every e-mail or by writing to podpora@tradestreet.cz.

Website visits, cookies and measurement

• Data: IP address, browser and device type, pages visited, traffic source, cookie identifiers.
• Purpose: secure operation of the website (necessary), traffic measurement (analytics) and advertising (marketing).
• Legal basis: for necessary technologies, legitimate interest – Art. 6(1)(f) GDPR; analytics and marketing cookies only with your consent – Art. 6(1)(a) GDPR.
• Retention: depending on the individual cookies, detailed in the Cookie Policy. We keep technical server records (logs) for no longer than 90 days.
• Own statistics without cookies: we also count visits ourselves, without storing anything on your device. We use the IP address only in the server’s memory to create a daily fingerprint, which is deleted at the end of the day; we keep only aggregate figures. Legal basis: legitimate interest – Art. 6(1)(f) GDPR. Details in the Cookie Policy.

Protection of our legal claims

On the basis of our legitimate interest (Art. 6(1)(f) GDPR), we may retain the data needed to evidence the contract, payments and communication for the duration of the limitation periods, at most 4 years from the end of the contract, if a dispute needs to be resolved.

We do not make automated decisions about you and do not create profiles that would have legal or similarly significant effects on you. You provide your data to us voluntarily; however, without account and payment data we cannot provide the service.

3. Who we disclose data to

We do not sell your data. We are helped with it only by carefully selected processors with whom we have concluded a data processing agreement:

We exchange data with brokers only on your instruction: during automatic synchronisation we download your trades from them on the basis of the access you have granted. We may also provide data to public authorities where required by law.

4. Transfers outside the EU

We process data primarily in the European Union. Some processors (e.g. Google, Meta, Stripe) may also transfer data to the USA. This takes place on the basis of a European Commission adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the European Commission.

5. Security

We protect data with technical and organisational measures appropriate to the current state of the art: encrypted connections (HTTPS), encrypted storage of passwords and access keys, restriction of access to authorised persons only, and regular backups. If a security breach occurred that would pose a high risk to you, we will inform you without undue delay.

6. Your rights

You have the right:

• of access – to find out what data we process about you and obtain a copy of it,
• to rectification of inaccurate or incomplete data,
• to erasure (“to be forgotten”) if we no longer need the data or process it unlawfully,
• to restriction of processing, for example until we resolve your objection,
• to data portability – to receive the data you have provided to us (including your trades) in a machine-readable format,
• to object to processing based on legitimate interest, including the sending of commercial communications,
• to withdraw consent at any time, for cookies via Cookie settings; withdrawal does not affect processing carried out before it,
• to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.

You can exercise your rights by e-mail to podpora@tradestreet.cz. We will respond within one month. To avoid disclosing data to the wrong person, we may ask you to verify your identity, most often by replying from your account e-mail address.

7. Other information

• The service is intended for persons over 18 years of age. We do not knowingly process children’s data.
• We may update this policy. We will inform you of material changes by e-mail or in the application.
• The use of cookies is described in detail in the Cookie Policy, and the terms of the service in the Terms and Conditions.

The TradeWio team
Viral Media spol. s r.o.