What we keep, why we keep it, and the control you have.

This policy explains what personal data Travise collects, why, who we share it with, how long we keep it, and the rights you have over it. Travise is operated as an individual business based in Hong Kong and is the data controller for the account you create with us. Questions or requests go to info@travise.ai .

1. The data we collect

We collect the following categories of personal data:

• Account and identity: your email address, a password (stored hashed by our authentication provider), your account id, and, if you upgrade to a paid plan, your Whop user and membership ids.
• Trade content you write:ticker, entry and exit, size, fees, and P&L, plus the free-text fields you fill in: your thesis, notes, self-assessment, expected outcome, and how you felt during the trade.
• Chart screenshots you attach: the image itself, plus the entry and exit points you mark on it. Attaching one sends the image to our model provider so the read can look at the same chart you did.
• Prop-firm account settings:if you trade a funded account, the account size and the firm's rules you enter so the read can grade against them.
• Support messages: what you write to us in the in-app support thread, and our replies.
• Data we derive: the Travise read for each trade, the cross-trade behavioral profile we compute from your history, your coaching history, daily reads, chat history, and Mentor Letters.
• Connected broker data: if you link a broker, encrypted access credentials and the trade and position data we import on your instruction.
• Technical and usage data: a first-party analytics identifier, session identifier, pages visited, referrer, device viewport, and error diagnostics.
• Marketing data: when you consent to marketing cookies, the Meta Pixel identifiers described in our Cookie Policy.
• Waitlist data:if you joined our pre-launch waitlist, your name, email, how you found us, your browser's user-agent string, and a one-way hash of your IP address that we used only to spot spam signups. The unsubscribe link in the confirmation email deletes the entry.

Some of what you write (how you felt during a trade) and what we infer (behavioral patterns) is personal, so we treat it with extra care and never use it for advertising. The notes about how you felt are trading-discipline reflections (for example calm, rushed, or revenge), not health data, so they are not a special category under GDPR Article 9, and we do not collect special-category data. Please do not enter health, biometric, or other special-category information into the free-text fields.

2. How we use it, and our lawful basis

We process your data for these purposes:

For analytics and the Meta Pixel, what happens depends on where you are. In the EEA, the UK, and Switzerland (and anywhere we cannot determine your region), nothing non-essential loads until you accept in the consent banner. Elsewhere, including the United States, we show a notice and non-essential cookies run unless you opt out; rejecting in the banner or the footer's Cookie preferences stops them. We honor the Global Privacy Control signal as an opt-out everywhere, and an explicit choice you make in the banner always wins over the regional default. We rely on our legitimate interests only for first-party security, abuse prevention, and error monitoring that does not depend on those cookies. The Mentor Letter and product news go out on your consent, with an unsubscribe link in every message; we do not rely on a soft opt-in.

3. Who we share it with

We do not sell your personal data. We share it with the service providers that run Travise (our sub-processors): our hosting, database and authentication provider, our email provider, our error monitoring provider, our broker-data providers, and the third-party model provider (Anthropic) that generates the read from your trade notes. The full list, with what each receives and where it is located, is on our sub-processors page. Each processes this data only on our instruction. Most are covered by a data-processing agreement that forms part of the provider's standard terms; where a provider asks us to accept or sign one separately, we are working through those, and we will not keep sending your data to a provider that refuses one.

4. International transfers

Travise is operated from Hong Kong and most of our providers are based in the United States, so your data is processed outside the UK and EEA. Where it is, the transfer relies on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum), and on the EU–US Data Privacy Framework where the provider is certified. We apply supplementary measures: encryption in transit, encryption at rest for your broker credentials, redaction of error diagnostics, and minimizing what each provider receives (our market-data provider gets only tickers and dates, never your identity).

5. How long we keep it

We keep your trades, reads, profile, and the rest of your account data for as long as your account is active. When you delete your account it is erased (see your rights below). Raw analytics events are deleted after about 13 months; aggregate, non-identifying statistics are kept longer. Records of our own model usage (which feature ran, token counts, and cost, tied to your account id) are deleted after about 13 months too. Webhook logs are deleted after 30 days. Error diagnostics follow our monitoring provider's retention. After you delete your account, residual copies may remain in our providers' encrypted backups until those roll off on their normal schedule.

6. Your rights

You can access, correct, export, delete, restrict, or object to our processing of your data, and withdraw consent at any time. You also have the right to complain to a supervisory authority. If you are in Hong Kong, that authority is the Office of the Privacy Commissioner for Personal Data (PCPD); in the EEA or the UK, you can complain to your local data protection authority (the Information Commissioner's Office in the UK).

• Access and portability: download everything we hold from Settings → Download my data, or email us.
• Erasure: Settings → Delete my account erases your data, ends your subscription, and removes your login. It cannot be undone.
• Correction: edit your trades, name, and email in the app.
• Withdraw consent: use Cookie preferences in the footer for cookies, and the unsubscribe link or Settings → Subscription for email (the Mentor Letter, daily read, and product news each have their own switch, on every plan including the trial).
• Restriction and objection: to restrict processing, object to it, or correct something you cannot edit in the app, email info@travise.ai and we will handle it directly.

We respond to rights requests within one month, as the law allows.

7. Automated analysis and profiling

Travise reads your trades automatically and builds a behavioral profile of your patterns. This is decision support for you, the trader. It is not financial advice, and it does not make decisions that produce legal or similarly significant effects about you. You stay in control of every trading decision. Because every trading decision stays with you and the read has no legal or similarly significant effect on its own, this is not the solely automated decision-making that GDPR Article 22 restricts. You can ask how a read is produced, and you can stop using it at any time.

Reads, letters, the daily read, the first-five-trades diagnostic, and chat answers are AI-generated. Each of those surfaces, and every email that carries one, is labeled “AI-generated” in the product, as EU AI Act Article 50 requires.

8. Children

Travise is not for anyone under 18. We do not knowingly collect data from children.

9. Cookies

We use essential cookies to run Travise and, with your consent, analytics and marketing cookies. See the Cookie Policy for the full list and use Cookie preferences in the footer to change your choice.

10. California privacy rights

If you are a California resident, you have the right to know, access, correct, and delete your personal information, and to opt out of the "sale" or "sharing" of it. Our Meta Pixel may constitute "sharing" for cross-context advertising; use Cookie preferences (which honors Global Privacy Control signals) to opt out.

We honor the Global Privacy Control browser signal as an opt-out from cookie-based analytics and sharing. We do not respond to legacy "Do Not Track" browser signals, which never became a standard; Global Privacy Control is the signal we act on.

11. Changes

We will update this policy as Travise changes and post the new effective date here. We will tell you about material changes by email or an in-app notice.

12. Contact

Reach us at info@travise.ai . Travise is based in Hong Kong. If you are in the EEA or the UK, you can contact us directly at that address about your data; where the law requires us to designate a local representative, we will name them here.