Privacy Policy

Last updated: 7 May 2026

TradeLog NZ (“we”, “us”, “our”) is committed to protecting your personal information. This policy explains what information we collect, how we use it, and your rights under the Privacy Act 2020 (New Zealand).

By using TradeLog NZ, you agree to the collection and use of information as described in this policy.

1. Who we are

TradeLog NZ is a New Zealand-based software service that provides trading journal and tax calculation tools for New Zealand active traders. We are not a financial adviser, tax agent, or registered financial service provider. Our service is a calculation and record-keeping tool only.

Questions about this policy can be sent to privacy@tradelog.nz.

2. Information we collect

We collect the following categories of information:

  • Account information — name, email address, and password (stored securely via Supabase Auth; we never see your plain-text password).
  • Onboarding preferences — instruments traded, primary broker, estimated other income, whether trading is your primary income source. This is used solely to pre-configure your tax calculations.
  • Trade records— instrument, direction, dates, prices, P&L, and exchange rates that you enter or import. This data is stored on your account and never shared with third parties.
  • Expense records — business expense categories and amounts you enter for tax deduction purposes.
  • Usage data — pages visited, features used, and errors encountered, collected via PostHog analytics. This data is anonymised where possible and used only to improve the product.
  • Payment information — subscription and billing details are handled entirely by Stripe. We do not store your credit card number or bank account details. See Stripe’s Privacy Policy.

3. How we use your information

We use your information to:

  • Provide the TradeLog NZ service and calculate your NZ tax estimates.
  • Send transactional emails (e.g. subscription receipts, payment failure notifications) via Resend.
  • Respond to support requests and feedback you submit.
  • Improve product features and fix bugs using anonymised analytics.
  • Comply with legal obligations.

We do not sell your personal data to third parties. We do not use your trade data for advertising or share it with any financial institution.

4. Data storage and security

Your data is stored in Supabase (hosted on AWS in the ap-southeast-2 Sydney region). All data is encrypted at rest and in transit (TLS 1.2+). Row-level security policies in our database ensure each user can only access their own data.

We use industry-standard security practices, including access controls, audit logging, and regular security reviews. However, no system is perfectly secure. If you believe your account has been compromised, contact us immediately at privacy@tradelog.nz.

5. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we will permanently delete all your trade records, tax calculations, and profile data within 30 days, except where we are required by law to retain it longer.

Anonymised, aggregated usage analytics may be retained indefinitely as they cannot be linked back to you.

6. Your rights under the Privacy Act 2020

Under the Privacy Act 2020 (NZ), you have the right to:

  • Access your personal information — request a copy of all data we hold about you.
  • Correct your personal information — request we correct any inaccurate data.
  • Delete your account and data — via Account Settings or by emailing us.
  • Complain — if you believe we have breached the Privacy Act, you may complain to the Office of the Privacy Commissioner.

To exercise any of these rights, email privacy@tradelog.nz. We will respond within 20 working days as required by the Act.

7. Cookies

We use cookies and similar technologies to maintain your login session (via Supabase Auth) and to collect anonymised analytics (PostHog). We do not use advertising or tracking cookies. You can disable cookies in your browser, but this will prevent you from logging in.

8. Third-party services

We use the following third-party services to operate TradeLog NZ:

  • Supabase — database, authentication, file storage
  • Stripe — payment processing and subscription management
  • Resend — transactional email delivery
  • PostHog — anonymised product analytics
  • Vercel — website hosting and deployment
  • RBNZ — publicly available exchange rate data (no personal data shared)

Each provider is bound by their own privacy policy and data processing agreements. We select providers that meet adequate data protection standards.

9. Changes to this policy

We may update this policy from time to time. Material changes will be notified via the in-app announcement banner or by email at least 7 days before taking effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.

10. Contact

For any privacy questions or data requests, contact us at privacy@tradelog.nz.