Privacy notice

What is GetPipsy?

GetPipsy is an online trading journal and performance workspace. It helps you log and review trades and — depending on your plan — use modules such as visual analytics, emotion journaling, prop-firm tracking, and optional MetaTrader integration. We use personal data only to run and improve the product. We do not sell your journal or profile data to third parties for advertising.

Data controller

The organisation responsible for personal data in connection with GetPipsy (https://getpipsy.com) is the registered legal entity that issues invoices and contracts. Full legal name, address, and registry identifiers are shared on invoices and upon formal request.

Privacy enquiries: hello@getpipsy.com — we respond within a reasonable time.

What data do we process?

Account & sign-in: username or name, email, password (stored as a secure one-way hash), account status. Billing (Stripe): customer and subscription identifiers and billing-related data are processed by Stripe under their policies; we store what is needed to activate and maintain your plan.

Journal: fields you enter (e.g. date, instrument, market, session, direction, timeframe, notes, PnL-style fields, rule-follow flags) and optional trade screenshots.

MetaTrader (EA) logging: if you enable it in your account and in MetaTrader, closed-trade data sent according to our rules may appear in your journal.

Emotion / behaviour-style modules: inputs you provide within those features.

Prop-firm settings: limits, templates, and configuration you choose for rule tracking.

Affiliate program: if you apply and become an approved partner, we process your application details, your personal referral link / code, click and conversion events (including IP or technical logs where needed to prevent abuse), commission ledger data, and billing and bank details you provide for payouts (e.g. IBAN). The partner dashboard may show limited identifiers of referred users (e.g. username, email) to operate the program.

Technical data: limited logs (e.g. IP, browser-type data, error logs) for security, stability, and abuse prevention.

Why we use data (purposes & legal bases)

• Contract — account, journal, payments, customer support.
• Legitimate interests — security, fraud/abuse prevention, quality, aggregated non-identifying statistics about the platform.
• Legal obligation — where required (e.g. tax or authority requests).
• Consent — if you tick optional marketing at sign-up and complete double opt-in via the confirmation email, we may send newsletters or promotional messages; every message includes a way to unsubscribe. Core service use does not require marketing consent.

Processors & sharing

Trusted vendors acting on our instructions: e.g. hosting, email delivery (verification, password reset, optional marketing double opt-in), Stripe (payments), and — when Pipsy AI Coach is enabled and you use it — Google Generative Language (Gemini) API for text generation (Google processes forwarded prompts under its own terms). We use contracts or statutory safeguards as required. We do not sell your trading journal.

Storage, location & security

We apply reasonable technical and organisational measures (HTTPS, protected sessions, CSRF protection on forms, password hashing). Data location depends on your hosting setup — the final policy should state the primary region.

Retention

We keep data while your account is active and as needed to provide the service. If you request erasure and no law requires retention, we delete within a reasonable period. Backups roll off on a normal schedule.

Your rights

Depending on applicable law (including GDPR): access, rectification, erasure, restriction, portability, objection. Contact us at the published email. You may also contact your local supervisory authority — we still prefer to resolve questions with you directly when possible.

Cookies & language

A session cookie keeps you signed in (name GETPIPSYSESSID). A pipsy-language cookie and localStorage may remember UI language. Referral attribution: when someone opens a partner referral link, a first-party pipsy_aff_ref cookie may be set for up to 90 days (SameSite=Lax) so a later sign-up can be attributed to that partner — this is not a third-party ad-tracking cookie.

Insights & Pipsy AI Coach (Gemini)

Analytics, suggestions, and plan-dependent Pipsy AI Coach views use aggregates and excerpts built from your journal to surface patterns. When our Gemini integration is configured, that material (plus instructions) may be sent to Google to generate text; if the API is unavailable, you may see rule-based or pre-composed copy instead. AI output is not investment, tax, or legal advice, can be wrong, and does not replace professional judgement. See Google’s documentation for how they handle API data.

Children

The service is not intended for users under 18. If we learn we have such data, we take steps to delete it.

Changes to this notice

We may update this text for new features or legal requirements. We will give reasonable notice for material changes (e.g. on this page or by email). Continued use after an update means you accept the revised notice where applicable.

Contact

Privacy questions: hello@getpipsy.com