Privacy Policy
This Privacy Policy explains how Martin Cargeeg, trading as Exhibit A (“we”, “us”, “our”), a UK-based sole trader, collects, uses and protects your personal data when you use Exhibit A (the “Service”). We are the data controller for the purposes of UK data protection law, including the UK GDPR and the Data Protection Act 2018.
1.What data we collect
- Account details — the email address (and any display name) you provide when you create an account.
- Your trading content — the trades, journal entries, notes, missed-trade records, tags, settings and other information you enter into the Service.
- Screenshot links — where you add chart screenshots, we store the links (URLs) you supply (for example TradingView snapshot links); we do not host the images themselves.
- Payment information — if you buy a paid plan, payment is handled by Stripe. We do not receive or store your full card details; we may receive limited billing metadata (such as confirmation of payment and your plan).
- Basic technical data — standard information your browser and our hosting provider generate, such as approximate log data, needed to deliver and secure the Service.
2.Where your data is stored
Before you create an account, the Service runs entirely in your browser: your trades and journal are stored locally in your own browser (in its local storage) and are not sent to us. Once you create an account, your account and content are also stored in the Service’s hosted database provider, Supabase, so they can sync and persist across sessions and devices.
3.How we use your data
We use your data to provide and maintain the Service, to create and secure your account, to save and display your trades and analytics, to process payments and manage your plan, to respond to support requests, and to comply with our legal obligations. Our lawful bases are performance of our contract with you, our legitimate interests in running and improving the Service securely, and, where relevant, your consent and compliance with legal obligations.
4.Service providers (processors)
We rely on a small number of trusted third parties who process data on our behalf:
- Supabase — hosted database and authentication (stores your account and content once you sign up).
- Stripe — payment processing for paid plans.
- Netlify — hosting and delivery of the Service.
- Forex Factory public feed — supplies the public economic-calendar data shown in the Service. This is general market data and does not involve sharing your personal information.
Each provider handles data under its own privacy terms. Some may process data outside the UK; where they do, appropriate safeguards (such as UK-approved transfer mechanisms) are relied upon.
5.Cookies and local storage
The Service uses your browser’s local storage to keep your trades, preferences and (before sign-up) your account working, and to remember settings such as your theme. Once you sign in, authentication may use cookies or similar tokens to keep you logged in. We do not use third-party advertising or tracking cookies.
6.Data retention
We keep your account and content for as long as your account is active or as needed to provide the Service. If you delete your account or ask us to erase your data, we will delete it from our hosted database within a reasonable period, except where we must retain limited records to meet legal, tax or accounting obligations. Data held only in your browser’s local storage remains under your control and can be cleared by you at any time.
7.Your rights
Under UK GDPR you have the right to access, correct, delete or restrict processing of your personal data, to object to certain processing, and to data portability. You can exercise many of these directly in the app, or by contacting us. Where we rely on consent, you can withdraw it at any time. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
8.Children
Exhibit A is not aimed at anyone under 18 and is not intended for use by children. We do not knowingly collect personal data from under-18s. If you believe a minor has provided us with personal data, please contact us and we will delete it.
9.Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you.
10.Contact
For any privacy request or question — including access or deletion — contact Martin Cargeeg (trading as Exhibit A) at support@exhibit-a-trading.com. We are a UK-based sole trader; a postal address is available on request.