Privacy & Cookie Policy

Effective Date: September 17, 2026
Last Updated: September 17, 2026
Entity / Data Controller: PT Teratai Kapital Teknologi, operator of Edgekeeper (“Edgekeeper”, “we”, “our”, or “us”)
Platform URL: edgekeeper.io
Contact: [email protected]

1. Introduction

Welcome to Edgekeeper. We respect your privacy and are committed to protecting the personal, technical, and trading performance data you entrust to us. This Privacy & Cookie Policy explains how we collect, use, store, process, and safeguard your information when you access or use our SaaS trading journal software, dashboard, and AI Risk Officer (collectively, the “Services”).

By creating an account or using Edgekeeper, you agree to the practices described in this policy.

2. Information We Collect

We categorize the information we collect into two primary forms: Personal Information and Non-Personal / Technical Information.

2.1 Personal Information Data

Personal Information refers to data that identifies you or can be reasonably linked to your identity. Edgekeeper processes and stores:

• Account & Profile Identity: Your full name (name), email address, IANA timezone preference, default trading instrument preference, and unique user identifier (clerk_id) provided during signup via our authentication provider (Clerk).
• Trading & Execution Records: Permanent storage of trade executions, order fills, contract quantities, entry/exit prices, profit and loss (P&L), commission costs, setup tags, session parameters, free-text journal notes, emotional state markers, and uploaded trade chart screenshots.
• Billing Metadata: Subscription status, active tier, plan variant IDs, payment card brand (e.g., Visa, Mastercard), and the last 4 digits of your payment card, processed via our Merchant of Record (Lemon Squeezy). Full credit card numbers and billing addresses are handled exclusively by Lemon Squeezy and are never received or stored on Edgekeeper servers.

2.2 Non-Personal & Technical Information

Non-Personal Information includes technical attributes and telemetry that do not directly reveal your identity on their own:

• Device & Connection Attributes: Operating system, browser type and version.
• Network Telemetry: Internet Protocol (IP) address, referring URL/previous platforms visited, and request headers.

3. Third-Party Service Processors and Data Pathways

To deliver our trading analytics, infrastructure, and AI coaching, Edgekeeper shares personal data only with processors acting on our instructions, in the following categories: identity and authentication; AI analysis; payment processing and tax; hosting and database infrastructure; encrypted object and backup storage; and network security and content delivery. We do not sell your data to any third party.

The processors we currently use in each category are listed below. This list is accurate as of the Last Updated date at the top of this page; you may contact [email protected] for the current list at any time.

A note on AI processing. Anthropic’s handling of data submitted through its API is governed by its own commercial terms. As at the Last Updated date above, those terms state that Anthropic may not train its models on customer content submitted through the API. The current version is published at anthropic.com/legal/commercial-terms.

4. How We Use Your Data

We use the collected information strictly for operational and core service delivery:

• Trading Analytics & Dashboard Rendering: Calculating P&L, equity curves, drawdown heatmaps, calendar summary cards, and performance metrics.
• AI Behavioral Coaching (AI Risk Officer): Generating automated, one-way risk assessments (e.g., detecting revenge trading or oversize sizing after losses) using pseudonymous execution data sent to Anthropic’s Claude API.
• Aggregated Benchmarks & Product Improvement: Producing aggregated, de-identified statistics across users — for example instrument-level or cohort performance benchmarks — which are irreversibly stripped of identifying detail and cannot be traced back to any individual user, account or trade.
• Platform Security & Compliance: Monitoring system stability, mitigating malicious traffic via Cloudflare, and managing payment subscriptions.

5. Data Storage, Security & Retention

• Security Measures: Data in transit is protected with TLS 1.2 or higher (terminated at Cloudflare). Data at rest, including database records and trade screenshots (Backblaze B2), is stored in encrypted environments behind key-authenticated firewalls. No method of transmission over the internet, or of electronic storage, is completely secure — while we protect your information using commercially reasonable measures, we cannot guarantee absolute security.
• Data Location: Primary application services and database clusters are currently hosted on Hetzner infrastructure located in Germany (EU). If we change hosting provider or region, we will update this policy and its Last Updated date.
• Retention & Deletion Policy: Your trading data is retained for as long as your account exists, so that historical multi-month performance analytics remain available to you. If your free trial or paid subscription ends, your account is locked rather than deleted — access to the Services stops, but your data is preserved unchanged and is restored in full if you subscribe later. We do not automatically delete inactive or lapsed accounts; your data is retained indefinitely until you ask us to delete it. Account deletions are currently processed manually upon request by emailing [email protected]. Upon manual deletion, active database records are removed immediately; residual copies contained within encrypted nightly system backups are permanently deleted no later than 91 days after the backup containing them was taken, in accordance with our backup retention schedule.

6. Cookie Policy

Edgekeeper uses strictly necessary cookies to operate the service:

• Essential Session Cookies: Issued by Clerk to authenticate your login identity, secure API sessions, and prevent Cross-Site Request Forgery (CSRF).
• No Third-Party Advertising Cookies: Edgekeeper does not place third-party advertising, cross-site tracking, or marketing cookies.

7. Children’s Privacy

Edgekeeper is intended solely for users aged 18 or over. The Services are not directed at children, and we do not knowingly collect personal information from anyone under 18.

If you believe that a person under 18 has provided us with personal information, contact [email protected] and we will delete the account and its associated data.

8. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in the Services, our data processors, or applicable law. When we do, we will publish the revised policy at this URL and update the Last Updated date at the top of the page. Your continued use of the Services after a revised policy is published constitutes acceptance of it, so we encourage you to review this page periodically.

9. Your Privacy Rights & Contact

We extend the following rights to every user, wherever you are located: to access the personal data we hold about you, to receive an export of it, to have inaccurate data corrected, and to request its deletion. Where the law of your country grants you additional rights, we will honour those as well.

We do not charge for handling these requests, and we will respond within 30 days. We may ask you to verify your identity before acting on a request, so that we do not disclose or delete another person’s data.

To exercise any of these rights, or to raise a privacy inquiry, please contact us:

PT Teratai Kapital Teknologi (operator of Edgekeeper)
Jl. Tanjung Duren Raya No. 1, Jakarta 11470, Indonesia
Email: [email protected]
Website: https://edgekeeper.io