Privacy policy
Last updated: 16 October 2026
1. Who we are
ImprintTrader is a SaaS platform operated as a sole proprietorship based in South Africa.
Trading name: ImprintTrader
Operated by: Petrus Truter
Address: 35 De Rust Ave, Fraaiuitsig, Little Brak River, 6503, South Africa
Email: support@imprinttrader.com
Phone: +27 83 625 2717
We are subject to the Protection of Personal Information Act (POPIA) of South Africa and, where applicable, the General Data Protection Regulation (GDPR) of the European Union.
Information Officer (POPIA): Petrus Truter — support@imprinttrader.com
2. Information we collect
Information you provide directly
- Account information: email address, full name (optional), and display preferences such as your Pattern Lab chart-order setting
- Trading strategy data: strategy names, conditions, indicator descriptions
- Chart images: screenshots you upload for scoring, journaling and pattern research
- Pattern research data (Pattern Lab): for each pattern, its name, market, family, direction, timeframes, symbol, notes and the conditions you chose to record on its samples; for each sample, its symbol, side, capture time, note, outcome, optional after shot, and for each condition whether its chart showed it (there or not there); the times our server records for each sample — when it was saved, when it last moved to another pattern, when its outcome was first marked and when it was last marked, and when each of its conditions was recorded — which decide which samples a test going forward counts; your list of conditions (their labels, colours and order); your tests going forward (the combination of conditions tested, when each test started and was stopped, what stopped it, and the count it had when it stopped); and, for patterns set up before conditions were recorded on samples, the required or forbidden state each condition had on the pattern. Samples and conditions are kept until you delete them or your account, and deleting a condition deletes what your samples recorded for it; patterns can be archived (merging patterns archives the ones merged in) but not individually deleted, and tests going forward can be stopped but not deleted; both are deleted with your account.
- Trade records: scores, grades, outcomes, emotional states you log
- Trading habit profile: your answers to the 24 moments, the result worked out from them, how your answers to like moments compared, and the date you saved them. While you answer, these stay in your browser. They are sent to us when you open your trading habit profile in an account. If you sign up with your email address from that page, the answers are also sent with the sign-up and kept with that account, even before its address is confirmed, so that the confirmation link can open them on any device.
- Research questions you submit for AI report generation
- Support and contact form messages
Information collected automatically
- Usage data: pages visited, features used, session duration
- Technical data: IP address, browser type, device type, operating system
- Authentication data: login timestamps, session tokens
- Analytics data: aggregated page views and feature usage via Vercel Analytics
- Product analytics: page views, feature usage, and product events (for example, that an imprint was created or a trade was scored) via PostHog, hosted in the European Union. This runs cookielessly — it sets no cookies or persistent identifiers on your device. It never records the text shown on screen or what you type, and we do not send it your trade contents, chart images, or strategy details. Page addresses are sent with email addresses, security tokens, payment references and advertising click identifiers removed; if you arrived through a campaign link, its campaign tags (such as utm_source) are included.
Information collected through cookies and tracking (with your consent)
When you accept advertising or analytics cookies, the following additional data may be collected by third-party platforms:
- Advertising identifiers, such as the ad click identifier (gclid, fbclid) of the ad that brought you to us, and browser fingerprint data
- Pages visited and actions taken for ad conversion tracking
- Referral source and campaign attribution data: how you first found us, kept in the it_src cookie described in Section 5 and saved to your account when you sign up
Payment information
We do not store your payment card details. All payments are processed by Creem, which acts as merchant of record and is subject to its own privacy policy. Checkout runs on a page or in-page overlay hosted by Creem. To create a checkout, we share your email address and account identifier with Creem, together with an affiliate referral identifier if you arrived through an affiliate link. We receive back a customer identifier and subscription identifier, and your subscription status, plan, renewal date and seat count, including whether a payment has failed and when a cancellation has been scheduled.
3. How we use your information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process your trades through our AI scoring engine
- Generate research reports based on your trade data
- Send transactional emails (account confirmation, password reset, credit alerts)
- Monitor and improve the performance and security of the Service
- Comply with legal obligations
- Measure and optimise the performance of our advertising campaigns (with your consent)
- Serve relevant advertisements on third-party platforms to prospective users (with your consent)
We do not sell your personal data to third parties. We do not use your trading data or chart images to train AI models.
4. Legal basis for processing (GDPR)
For users in the European Economic Area (EEA) and United Kingdom, we process personal data under the following legal bases:
- Contract performance — processing necessary to provide the Service you subscribed to (account data, trade data, payment processing)
- Legitimate interests — security monitoring, fraud prevention, service improvement, analytics, and affiliate referral attribution where these interests are not overridden by your rights
- Legal obligation — where we are required by law to retain or process data
- Consent — advertising cookies, marketing tracking pixels (Google Ads, Meta Pixel, TikTok Pixel), and any non-essential cookies. You may withdraw consent at any time via Cookie settings, in the footer of our website and in Section 5 of this policy.
5. Cookies and tracking technologies
We use cookies and similar tracking technologies. You can change or withdraw your choices at any time: open (the same link is in the footer of our website). A change takes effect immediately.
Some reading preferences, such as how many Pattern Lab samples are shown per row, are kept only in your browser's local storage on that device; they are not sent to us and are not used for tracking.
Essential cookies
These are strictly necessary for the Service to function. They cannot be disabled. They include authentication tokens and session cookies that keep you logged in.
Functional cookies
Our affiliate programme uses a first-party cookie (affonso_referral, set by Affonso) to remember that you arrived through an affiliate referral link, so that a resulting subscription can be credited to the correct affiliate. It is a functional cookie used to operate the referral, contains only an opaque referral identifier, and is not used to build an advertising profile.
Analytics cookies
These help us understand how the Service is used so we can improve it. They collect aggregated, anonymised data about pages visited and features used. We use Vercel Analytics and PostHog (EU-hosted) for this purpose. PostHog's event analytics runs cookielessly and sets nothing on your device; if you accept analytics in the cookie banner, we additionally enable PostHog session replay — a masked recording of how the interface is used, in which all text on screen and everything you type is hidden, your uploaded chart images are not recorded, the contents of what your browser sends to and receives from our servers are not recorded, and your journal and strategy content are excluded entirely. Withdrawing analytics consent stops the recording straight away, in every open tab.
If you accept analytics or advertising cookies, we also set a first-party cookie, it_src, that remembers how you first found us: the campaign tags of the link you arrived through (such as utm_source), a referral code if the link had one, the referring website, the first page you visited and when — and, only if you accepted advertising cookies, the ad click identifier (gclid or fbclid). It lasts 90 days from your first visit. If you sign up while it is set, its contents are saved to your account and sent with the sign-up event to PostHog, so we can see which campaigns bring sign-ups. Nothing is stored before you make a choice, and withdrawing consent deletes the cookie (or, if you withdraw only advertising consent, removes the ad click identifier from it).
Advertising and marketing cookies
These are set by third-party advertising platforms when you consent to them. They allow us to:
- Measure the effectiveness of our advertising campaigns
- Show relevant ImprintTrader ads to you or to similar audiences on third-party platforms
- Track conversions from ad clicks to account signups
The advertising platforms we use or may use include:
- Google Ads / Google Analytics — Google LLC, United States. Google may use data collected for personalised advertising. Google Privacy Policy
- Meta (Facebook / Instagram) Pixel — Meta Platforms Inc., United States. Used for conversion tracking and custom audience targeting. Meta Privacy Policy
- TikTok Pixel — TikTok Ltd., used for conversion tracking and lookalike audience creation. TikTok Privacy Policy
You can opt out of personalised advertising from Google at adssettings.google.com, from Meta at your Facebook Ad Preferences, and from TikTok within the TikTok app settings.
6. AI processing
When you score a trade, your chart images and strategy data are sent to third-party AI providers for processing. These providers act as data processors on our behalf and are subject to their own privacy policies and data processing agreements. Chart images and strategy data are sent for inference only; we do not use them to train models, and each provider processes them under its own data-processing terms (see Section 10).
Pattern Lab does not use AI: your patterns, samples, sample charts, notes, conditions and tests going forward are never sent to an AI provider. The one exception is turning a pattern into an imprint. When you do, the imprint builder opens with one sample's charts as its reference charts (copies of them are stored with the imprint when you save it), and with the pattern's name, family, market, symbol, direction and notes filled into its fields — and, when you turn a combination of conditions into an imprint, that combination's conditions too. From that point they are handled like any imprint you are building: the builder's AI steps send them to an AI provider before you save (the pattern summary you generate before saving, and the optional consistency check). Once saved, the imprint's reference charts and strategy data are sent to the AI provider whenever you use AI features on it, such as scoring a trade against it.
The AI provider used for scoring and chart checks is configurable on our side and may be any of: Anthropic (United States), Google (United States), OpenAI (United States), DeepSeek (China), Zhipu AI / Z.ai (China), or the same models routed via OpenRouter (United States). This means your chart images and strategy text may be processed in the United States or, when a Chinese provider is selected, in China. Section 7 covers international transfers.
ImprintTrader is an independent product and is not affiliated with, endorsed by, or sponsored by these AI providers. Their names are used only to identify the underlying technology that powers our AI features.
7. Data storage and international transfers
Your data is stored in Supabase, a cloud database service, in its London (United Kingdom) region. Chart images are stored in Supabase Storage in the same region. Some of the services listed in Section 10 are based in, or process data in, other countries — for example our email and hosting providers in the United States, and our affiliate platform in Germany — and AI inference requests (Section 6) are processed in the jurisdiction of the AI provider in use at the time — the United States or, when a Chinese provider is selected, China. By using the Service, you consent to your data being transferred to and processed in these countries.
Where we transfer personal data from the EEA or UK to third countries (including the US), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.
8. Data retention
We retain your account data for as long as your account is open. You can delete your account at any time from the Settings page, and deletion is immediate and permanent: your profile, Master Imprints, trades and scores, journal, reports, Pattern Lab patterns, samples, conditions and tests going forward, routines, your trading habit profile, credit history, the comments you wrote as a Studio coach and the chart images you uploaded are deleted as part of the deletion, and any paid subscription is cancelled at the same moment. There is no grace period, and we cannot restore a deleted account. If we terminate your account, it is deleted in the same way. A Studio coach's report that covers a trader — a report about them, or a team, imprint or multi-trader report that includes their trades — is deleted if that trader deletes their account.
If the email address of a new account is not confirmed within 7 days, we delete the account and everything sent with its sign-up.
In our own systems, after an account is deleted we keep only:
- Billing and usage records — payment amounts and dates, AI usage and cost records, and commission records. These are pseudonymised: they are linked to an internal account identifier, not to your name or email address. We keep them for as long as we need them for accounting, tax and fraud-prevention purposes;
- Product-analytics events and, if you consented to it, session replays, which PostHog holds against the same internal identifier (with the technical data described in Section 2) until they expire under our analytics retention settings;
- A record that the account was deleted — the internal account identifier, the date, and whether you or we deleted it — kept in our database and our support mailbox for 90 days, by which time every backup taken before the deletion has expired, so that a deleted account stays deleted if we ever have to restore the Service from a backup;
- Copies in our off-site backups, which we keep so that we can restore the Service after data loss. Database backups are encrypted; chart-image backups are encrypted at rest by our storage provider. Deleted data can remain in these backups for a limited time after the account itself has been deleted: each daily database backup is kept for 60 days and then permanently deleted, and chart images deleted from the Service are taken out of the chart-image backup on its next daily run and permanently deleted about a month after that. If we ever have to restore the Service from a backup, we delete again every account that was deleted after that backup was taken. The database backup also includes a list of the names, email addresses, plans, billing status and payment-provider identifiers of current and former subscribers, kept so that we can contact them about their billing if our systems fail;
- Operational error logs and a cache of AI score results, which refer to internal identifiers only;
- Anything we are required by law to retain; and
- Anonymised, aggregated data, which may be retained indefinitely for analytical purposes.
Our service providers also keep records under their own terms. Creem, our merchant of record, keeps records of your purchases under its own privacy policy; referral records in our affiliate platform, Affonso, are kept under its data-processing terms; and our hosting, email and AI providers keep request and delivery logs for a limited period.
9. Your rights
Under POPIA and GDPR (where applicable), you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate personal data
- Erasure — request deletion of your personal data ("right to be forgotten")
- Restriction — request that we restrict processing of your personal data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests or for direct marketing
- Withdraw consent — at any time where processing is based on consent, including analytics and advertising cookies via Cookie settings (Section 5)
- Lodge a complaint — with the Information Regulator of South Africa or your local data protection authority (EEA/UK users)
To exercise any of these rights, contact us at support@imprinttrader.com. You may also delete your account directly from the Settings page.
10. Third-party services
The Service uses the following third-party services as data processors:
- Supabase — database and file storage (London, United Kingdom region)
- Anthropic — AI trade scoring, chart checks, imprint-building assistants and the in-app help assistant (United States)
- Google (Gemini) — AI research, studio reports, Trader Memory summaries, imprint illustrations, and optionally trade scoring (United States)
- Groq — speech-to-text transcription via Whisper (United States)
- OpenAI — text-to-speech voice synthesis and speech-to-text fallback, and optionally trade scoring (United States)
- DeepSeek — optional AI trade scoring, when selected (China)
- Zhipu AI (Z.ai) — optional AI trade scoring and chart checks, when selected (China)
- OpenRouter — optional AI request routing to the above model providers, when selected (United States)
- Creem — payment processing (merchant of record)
- Affonso — affiliate referral attribution and payouts; receives your email address, name (if provided) and account identifier when you sign up, so that a sign-up that came through an affiliate link can be attributed; your email address when you join a coach's Studio team, so that the coach is recorded as your referrer; and, if you are a Studio coach, your email address, name and account identifier to enrol you in the affiliate programme (Germany, European Union)
- Resend — transactional email delivery (United States)
- GitHub — runs our automated backups and holds the encrypted database backup files for 30 days (United States)
- Amazon Web Services (S3) — off-site storage for our database and chart-image backups (London, United Kingdom region)
- Vercel — hosting, deployment, and analytics (United States)
- PostHog — product analytics and, with consent, session replay (European Union)
- Google Ads / Google Analytics — advertising and analytics (with consent)
- Meta Pixel — advertising conversion tracking (with consent)
- TikTok Pixel — advertising conversion tracking (with consent)
11. Children's privacy
The Service is not directed to children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice within the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
13. Contact and complaints
For privacy-related enquiries or to exercise your rights under POPIA or GDPR, contact our Information Officer:
Petrus Truter
support@imprinttrader.com
+27 83 625 2717
35 De Rust Ave, Fraaiuitsig, Little Brak River, 6503, South Africa
EEA and UK users also have the right to lodge a complaint with their local supervisory authority. South African users may contact the Information Regulator of South Africa at www.justice.gov.za/inforeg.