Privacy Policy
Last updated 1 August 2026
This policy explains what Michael Koken, trading as Stockonomy (sole proprietor) (“we”, “us”) collects when you use TradeDash, why we collect it, and what control you have over it. It applies to the TradeDash website and application.
1. Who we are
TradeDash is operated by Michael Koken, trading as Stockonomy (sole proprietor). For any privacy question, or to exercise any of the rights described below, email hi@stockonomy.co.
TradeDash is operated from the United States and is intended for customers in the United States. We are the controller of any personal data you provide.
2. What we collect
Information you give us
- Account details — your email address and password (stored hashed, never in plain text).
- Payment details — handled entirely by our payment processor, Stripe, Inc. We receive confirmation of payment, the plan purchased, and the last four digits and brand of your card. We never receive or store your full card number.
- Trading data you upload — the contents of CSV files you export from your broker and upload, plus any trades you enter manually, along with your notes, tags, grades, playbook entries and chart images.
- Anything you send us — support emails and their contents.
Information collected automatically
- Technical data — IP address, browser and device type, operating system, and approximate location derived from IP.
- Usage data — pages viewed, features used, timestamps, and referring URL.
3. What we do not collect
We never ask for, receive, or store brokerage credentials. TradeDash has no API connection to your broker, no read-only keys, and no account-linking integration. It cannot place trades, move funds, or see any account you have not exported yourself.
Trade data enters TradeDash in exactly one way: a CSV file you export from your broker and upload, or a trade you type in by hand.
CSV exports from supported brokers — TradeStation, Charles Schwab, thinkorswim, tastytrade and Webull — are read as files. We have no relationship with those firms and no access to your accounts with them.
4. How we use your information
| What we use | Why | Legal basis (UK/EU) |
|---|---|---|
| Account details | Create and secure your account, authenticate you, send service messages | Performance of a contract |
| Payment details | Take payment, manage renewals, issue refunds, meet tax and accounting obligations | Contract / legal obligation |
| Trading data | Provide the product — grading, Dash tracking, calendar, playbook, insights and alerts | Performance of a contract |
| Technical & usage data | Keep the service running, diagnose faults, prevent abuse, understand which features are used | Legitimate interests |
| Email address | Product updates and occasional marketing, where you have opted in | Consent |
| Advertising identifiers | Measure ad performance and reach similar audiences | Consent |
We do not sell your personal information, and we do not sell or publish your trading data. We do not use the contents of your journal to build advertising profiles.
5. Cookies and tracking
We use a small number of cookies and similar technologies:
- Essential — keep you signed in and keep the app working. These cannot be switched off.
- Analytics — tell us which pages and features get used, in aggregate.
- Advertising — we use the Meta Pixel on our marketing pages to measure the performance of our advertising and to reach people with similar interests. It records page views, scroll depth, which questions you open in the FAQ, and whether you reach checkout. Meta processes this data under its own terms; see Meta's Privacy Policy.
We do not currently show a cookie consent banner, because TradeDash is offered to customers in the United States, where prior consent is not generally required for these cookies. If you would rather not be tracked, use your browser settings or your device’s ad-tracking controls.
Most browsers let you block or delete cookies, and you can opt out of interest-based advertising through your Meta ad settings or a tool such as the DAA opt-out page. Blocking essential cookies will stop the app from working.
6. Who we share it with
We share personal data only with service providers who help us run TradeDash, and only as far as they need it to do their job. Each is bound by contract to protect it:
- Payment processing — Stripe, Inc.
- Hosting and infrastructure — Supabase (database and authentication)
- Email delivery — a third-party transactional email provider
- Analytics and advertising — Supabase (first-party page analytics), Meta Platforms
We may also disclose information if the law requires it, to enforce our Terms of Service, to protect the rights or safety of anyone, or as part of a merger or sale of the business — in which case we will tell you before your data is transferred.
7. How long we keep it
- Your journal — kept while your account exists, including after paid access lapses, so you can pick up where you left off if you return.
- If you ask us to delete your account — removed from live systems within 30 days, and from backups within 90 days.
- Payment and tax records — kept as long as tax and accounting law requires, typically six to seven years.
- Support emails — kept for 24 months.
8. Your rights
Wherever you live, you can email hi@stockonomy.co to:
- get a copy of the data we hold about you;
- correct anything inaccurate;
- delete your account and your journal;
- export your trading data;
- opt out of marketing email (every marketing email also has an unsubscribe link).
If you are in the UK or EU, you also have the right to restrict or object to processing, the right to data portability, the right to withdraw consent at any time, and the right to complain to your data protection authority — in the UK, the ICO.
If you are in California, you have the right to know what we collect and why, to delete it, to correct it, and to opt out of any sale or sharing of personal information. We do not sell personal information as that term is defined under the CCPA/CPRA. We will not discriminate against you for exercising any of these rights.
We respond to all requests within 30 days.
9. Security
Data is encrypted in transit using TLS and encrypted at rest. Passwords are hashed. Access to production systems is restricted and logged. No system is perfectly secure, and we cannot guarantee absolute security — but because TradeDash holds no brokerage credentials and cannot act on any account, a compromise here cannot be used to trade or move money.
If a breach affects your personal data, we will notify you and the relevant regulator as the law requires.
10. International transfers
Your data is stored on servers in the United States. If you access TradeDash from outside the US, you are sending your information to the US, where privacy laws differ from those in your country.
11. Children
TradeDash is for adults. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe a minor has given us personal data, email us and we will delete it.
12. Changes to this policy
If we change this policy we will update the date at the top. For material changes we will email account holders at least 14 days before the change takes effect.
13. Contact
Michael Koken, trading as Stockonomy (sole proprietor)
hi@stockonomy.co