This policy explains how Maxime James (“we”, “us”), operator of BRASKOSCALEZ Journal at braskoscalez.com (the “Service”), collects, uses, shares and protects personal information. It is written to meet Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Person in charge of protecting your information
Maxime James, Founder and person in charge of the protection of personal information. Contact: contact.braskoscalez@gmail.com, Quebec, Canada. You can contact this person about any question, request or complaint concerning your personal information.
2. What we collect and why
| Information | Why we use it |
|---|---|
| Email address, trader name, password (stored only as a secure hash by our authentication provider) | Create and secure your account, sign you in, send account emails (confirmation, password reset). |
| Trading data you enter or import: trades, prices, P&L, accounts, strategies, notes, journal entries, psychology ratings, goals, prop-firm expenses and payouts | Provide the journal, statistics and analytics you ask for. This data is only shown to you. |
| Screenshots and files you upload | Display them alongside your trades, playbooks and receipts. |
| Broker or platform credentials you choose to connect (for example a ProjectX API key or Tradovate API credentials) | Read your account list and trading history from that provider, on your instruction. Used read-only; we never place, modify or cancel orders. |
| Technical data: IP address, browser type, request logs, error logs | Keep the Service secure (for example, rate limiting sign-in attempts), diagnose problems and prevent abuse. |
| Preferences: theme, selected account and date range, sidebar state | Remember your display choices. |
We do not use your information for advertising, we do not sell or rent it, and we do not build profiles of you for third parties. We do not use automated decision-making that produces legal or similarly significant effects about you. Statistics shown in the app are calculated from your own data for your own use.
3. Consent
By creating an account you consent to the collection and use described in this policy for the purposes above. Connecting a broker account is optional and requires a separate, explicit action by you. You may withdraw consent at any time by disconnecting a provider or deleting your account; some features will then stop working.
4. Cookies and similar technologies
We use only cookies that are necessary for the Service: an authentication session cookie that keeps you signed in, and preference cookies (theme, selected account, date range, sidebar state). Your browser's local storage remembers which trade-table columns you show. We do not use advertising or third-party tracking cookies.
5. Service providers and where your information is stored
We rely on the following providers, who process information only on our instructions and under contractual confidentiality and security obligations:
| Provider | Role | Location |
|---|---|---|
| Supabase | Database, authentication and file storage | Canada (Central) |
| Vercel | Website hosting and processing of requests | United States and global edge network |
| Resend (via Amazon Web Services) | Delivery of account emails | United States |
| Brokers and platforms you connect (e.g. ProjectX, Tradovate) | Source of the trading data you ask us to import | As set out in their own privacy policies |
Some of your information is therefore processed outside Quebec and Canada, where it may be subject to the laws of those jurisdictions. Before communicating information outside Quebec we assess whether it will receive adequate protection, and we limit what is shared to what each provider needs.
6. Security
- All traffic is encrypted in transit (HTTPS).
- Database access is restricted per user, so one account cannot read another's data.
- Broker credentials are encrypted with AES-256-GCM before storage, are never sent to your browser, and are deleted when you disconnect.
- Uploaded files are stored privately and served only to their owner.
No system is perfectly secure. If a confidentiality incident presents a risk of serious injury, we will notify you and the Commission d'accès à l'information du Québec as required by law, and keep a register of incidents.
7. How long we keep information
We keep your information while your account is active. When you delete your account, your data is deleted from our live systems promptly; residual copies in provider backups are overwritten within 30 days. Disconnecting a broker deletes its stored credentials immediately; trades already imported stay in your journal until you delete them. Technical logs are kept for a limited period for security purposes.
8. Your rights
Subject to the law, you may:
- access the personal information we hold about you, and learn how it is used and to whom it has been communicated;
- correct information that is inaccurate, incomplete or ambiguous;
- receive your information in a structured, commonly used technological format (you can export your trades as CSV from the app at any time);
- withdraw your consent, and ask us to delete your information (you can delete your account yourself under Settings);
- ask us to stop disseminating your information or to de-index any link to your name;
- file a complaint with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada.
To exercise a right, email contact.braskoscalez@gmail.com. We reply within 30 days and may need to verify your identity first.
9. Children
The Service is intended for adults aged 18 or older. We do not knowingly collect information from anyone under 18.
10. Changes to this policy
If we make material changes, we will notify you by email or in the app before they take effect. The effective date above shows when this policy was last updated.
See also our Terms of Service and Risk Disclaimer.