Privacy Policy
Last updated: September 2026
Controller
The controller for the processing of personal data on this website is Quantpeak Holdings LLC, e-mail business@tmi-ai.com. The full postal address is published in the Impressum.
Representative in the Union under Art. 27 GDPR: The appointment is in preparation. Until then, the controller can be reached about any data protection matter at business@tmi-ai.com.
1. Information We Collect
We collect information you provide directly, including your email address, trading data you log (trade entries, P&L, notes), and profile information. We also collect usage data such as pages visited, features used, and device information.
2. How We Use Your Information
We use your information to provide and improve TMI, generate AI-powered trading insights, process payments, send product updates (with your consent), and provide customer support.
Legal bases for processing
We process personal data on the following legal bases under Art. 6 GDPR:
- Performance of a contract (Art. 6 (1) (b) GDPR): providing the trading journal and storing your trades, accounts, journal entries and Mentor conversations.
- Consent (Art. 6 (1) (a) GDPR): analytics cookies and usage statistics, which you control through the cookie banner and can withdraw at any time.
- Legitimate interests (Art. 6 (1) (f) GDPR): error diagnosis, abuse prevention and the security and operation of the platform.
3. Data Storage & Security
Your data is stored securely using industry-standard encryption. Trade data is stored in our database and used solely to generate your personalized insights. We do not sell your personal data to third parties.
Retention period
We store your data for as long as your account exists. After the account is deleted, personal data is removed within 30 days. Statutory retention obligations, for example for payment records relevant to tax law, remain unaffected.
4. AI Processing
Your trade data is processed by AI models (Anthropic Claude) to generate personalized coaching insights and analytics. This processing occurs within our secure infrastructure via Anthropic's API. We may use anonymized, aggregated data to improve our models. Anthropic's privacy policy applies to data processed by their models.
5. Third-Party Services
We use the following third-party services, each governed by their own privacy policy:
- Stripe - payment processing
- Vercel - website hosting and edge infrastructure
- Vercel Analytics - privacy-friendly website analytics (no personal data, no cookies)
- Vercel Speed Insights - real-user performance monitoring (no personal data)
- Google Analytics - website analytics; loaded only after you accept analytics cookies in the cookie banner
- Supabase - database and data storage (EU region)
- Upstash - Redis-backed rate limiting; stores short-lived request counters keyed to your account or IP address
- Anthropic Claude - AI coaching and trade analysis via API; data processed under Anthropic's data processing agreement
- ElevenLabs / OpenAI - speech synthesis for the Tarvis voice coach (ElevenLabs or OpenAI, depending on configuration); only the reply text is sent, no account or trade data
- Web Speech API - browser speech recognition for the Tarvis voice coach and Open Ear; the microphone audio can be sent to your browser vendor for transcription (Google in Chrome, for example), and only the resulting transcript is stored in your account
- MetaApi - broker connectivity for MT4/MT5 account integration; processes trading account data on your behalf
- Tradovate - broker connectivity for futures account integration via OAuth 2.0; TMI only reads your orders, fills, positions, and account balance and never places trades or moves funds. Your Tradovate credentials are never stored by TMI. Access tokens are encrypted at rest and used solely to sync your trade data. You can revoke access at any time.
- TradeLocker - broker connectivity for TradeLocker account integration; TMI only reads your trades, positions and account balance and never places trades or moves funds
- NinjaTrader - broker connectivity for NinjaTrader account integration via OAuth; TMI only reads your orders, fills and account balance and never places trades or moves funds
- Resend - transactional email delivery (e.g. account confirmations, notifications)
- Sentry - error tracking and performance monitoring to help us diagnose and fix issues
Transfers to third countries
Some of the processors we use handle data in the USA, among them Stripe (payments), Vercel (hosting), Anthropic (AI Mentor), Sentry (error diagnosis) and Resend (e-mail delivery). Database and hosting run at Supabase in the eu-west-1 region. These transfers rest on the EU standard contractual clauses or, where the provider is certified, on the EU-US Data Privacy Framework. We provide details on request.
6. Your Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- Right of access - request a copy of your personal data
- Right to rectification - correct inaccurate data
- Right to erasure - request deletion of your data
- Right to object - object to processing based on legitimate interests
- Right to data portability - receive your data in a machine-readable format
- Right to lodge a complaint - with a supervisory authority (e.g. your national data protection authority)
To exercise your rights, contact us at support@tmi-ai.com. Account deletion removes all associated trade data within 30 days.
8. Contact
For privacy-related questions, contact us at support@tmi-ai.com.