Privacy Policy

1. Scope

This notice explains how Tradrill, operated by DUOCODE TECHNOLOGY (a business registered in Malaysia, registration no. LA0087244-A), handles personal data when you use our website, applications and support channels. It is issued under the Personal Data Protection Act 2010 (Act 709) and, where they apply to you, is intended to satisfy comparable notice duties under other privacy laws.

2. Data we collect

• Account data such as your email, authentication identifier and profile settings.
• Billing identifiers, subscription status and payment metadata from Stripe; Tradrill does not store full card numbers.
• Simulated trading activity you generate inside Tradrill — practice orders, positions and the behavioral metrics computed from them. Tradrill does not connect to brokerage accounts and never receives real trading or holdings data.
• Prompts, generated analysis, feature usage, device data, IP address and security logs.
• Messages you send to support.

3. Why we use data

We process data to provide and secure the service, authenticate users, deliver AI analysis, manage subscriptions, prevent abuse, troubleshoot, meet legal obligations and improve product reliability. Depending on context, our basis is performance of a contract, legitimate interests, consent or legal obligation.

4. Providers and international processing

We share only necessary data with infrastructure, authentication, payment, market-data and AI providers acting for us. These may include Stripe, Supabase, hosting providers, market-data providers and configured AI providers. Website analytics is not outsourced to a third-party advertising network: we run our own Umami instance on our own infrastructure, and no analytics data is sent to Google Analytics or any comparable ad-funded service. Data may be processed outside Malaysia or outside your country with contractual or other lawful safeguards.

5. AI processing

Prompts and relevant account context may be sent to the configured AI provider to produce requested analysis. Do not submit secrets or unnecessary sensitive personal data. We minimize context and use access controls, but AI output may be incorrect.

6. Retention and security

We keep data only as long as needed for the purposes above, legal obligations, disputes and security. Retention periods vary by data type. We use encryption in transit, restricted access, secret management and monitoring; no system can guarantee absolute security.

7. Your choices and rights

You may request access, correction, export or deletion, object to or restrict certain processing, withdraw consent where applicable, and complain to your local privacy authority — in Malaysia, the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi). Some records may be retained where legally required. Send requests from your account email to contact@tradrill.com.

8. Cookies and analytics

We use essential authentication, security and preference storage needed to operate the service. Our website analytics is a self-hosted, cookieless Umami instance: it sets no cookie, assigns you no persistent advertising or cross-site identifier, and is not used to track you across other websites. Because no cookie is set for analytics, no cookie-consent banner is required for it. We do not use advertising cookies. If either of these changes, we will provide appropriate notice and controls before it takes effect.

9. Children and changes

Tradrill is not intended for anyone under 18. We may update this notice and will post the effective date here; material changes will be communicated through the service or by email. Both the English and the Bahasa Malaysia version are updated together.

10. Contact

Privacy questions and general support: contact@tradrill.com. Data controller: DUOCODE TECHNOLOGY (LA0087244-A), Malaysia.