Privacy Policy

The controller of the personal information described here is JBN Management & Consulting LLC, of 66 W. Flagler St., Suite 900, Miami, FL 33130. Privacy requests and questions go to support@trade142.com.

This policy covers trade142.com, the Trade142 account area, the purchase flow, the mentorship application, and the emails we send you. It does not cover TradingView, Stripe, or any other third party you deal with directly — those have their own policies.

Information you give us

• Account — your name and email address, and a password that we store only as an irreversible hash. We never store, see, or can recover your actual password.
• Purchases — what you bought, when, the amount, the currency, and the status of the order and any subscription. Card details go directly to Stripe; we receive a token and, at most, the card brand and last four digits so we can show you which card is on file.
• TradingView username — if you subscribe to an indicator bundle, so we can grant script access.
• Mentorship application — see the next section, which is about this specifically.
• Mentorship submissions — if you are enrolled, the journals, trades, and notes you submit for review, and the feedback recorded against them.
• Support correspondence — what you write to us and what we write back.

Information collected automatically

• Sign-in and session activity, including IP address and approximate time, which we use to detect abuse, to enforce rate limits, and to record who took a sensitive action.
• Page and product usage — which pages and lessons you opened and when — so we know what is worth building and what is not being used.
• Email delivery events from our email provider: delivered, opened, clicked, bounced, unsubscribed, marked as spam.

Applications are stored in our database, are read by James Norman and by the site owner, and are used to decide whether to invite you to enrol. They are not sold, are not shared with anyone else, and are not used to build advertising audiences.

Applications that are declined are retained for 24 months and then deleted. You can ask us to delete yours sooner.

• To create and secure your account, and to let you sign in.
• To take payment, deliver what you bought, and keep your access correct as subscriptions renew, lapse, or are cancelled.
• To send transactional email you need — verification, receipts, renewal notices, password resets, and delivery of what you paid for.
• To review mentorship applications and to run a mentorship engagement if you enrol.
• To provide support and to keep a record of what was agreed.
• To detect and prevent fraud, account sharing, credential abuse, and attacks on the platform.
• To send marketing email, but only to people who asked for it, and with a working unsubscribe link in every message.
• To meet legal, tax, and accounting obligations.

Where a legal basis is required for processing, we rely on performance of our contract with you for account, purchase, and delivery processing; on your consent for marketing email and for any non-essential analytics; and on our legitimate interest in running a secure, functioning business for fraud prevention and security logging.

• We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
• We do not publish your name, your results, your submissions, or your application. See the Testimonial Disclosure for the standing rule on that.
• We do not ask for, want, or store brokerage credentials, account numbers, or trading platform logins. If you send them to us, we will delete them.
• We do not have access to your trading account and cannot place trades.

We use a small number of service providers, each of which processes information only to provide their service to us:

• Stripe, Inc. — Payment processing, invoices, and subscription billing.
• Vercel Inc. — Website hosting and delivery.
• Neon, Inc. — Database hosting for accounts, orders, and course progress.
• Cloudflare, Inc. — Private storage and delivery of lesson video.
• Resend (Plus Five Five, Inc.) — Transactional and course email.
• TradingView, Inc. — Granting indicator access to the username you provide.
• Google LLC — Advertising measurement (Google Analytics 4). Only after you accept cookies; receives page views and, if you buy, the order value.
• Meta Platforms, Inc. — Advertising measurement (Meta pixel and Conversions API). Only after you accept cookies; receives page views and, if you buy, the order value and a one-way hash of your email address.

That list is the complete one as of the effective date at the top of this page. If we add a subprocessor with access to your account content, we will say so here and tell account holders by email before it starts.

We will also disclose information where we are legally required to, and to professional advisers under confidentiality.

We use a session cookie to keep you signed in. It is strictly necessary — without it you cannot have an account — and it cannot be turned off while you are signed in.

We also record which advert or link brought you here, in a first-party cookie we set ourselves. That is how we tell which advertising is worth paying for, and it is set whether or not you accept the advertising cookies below. It holds the campaign parameters that were on the link you arrived through (the utm_ values and any advertising click identifier such as gclid or fbclid), the page you first landed on, the website you came from, and the time you arrived. It contains no name, no email address, and nothing you typed.

Advertising cookies, and how to say no. We run two third-party measurement tools — Google Analytics 4 and the Meta pixel — so we can tell which adverts lead to a purchase. Neither runs until you accept them. A banner asks before the first one is loaded, not after: decline, and no Google or Meta script is placed on the page at all, no cookie of theirs is set, and nothing about your visit is sent to either company. Declining changes nothing about what you can see, buy, or do here.

If you accept, this is what those two companies receive:

• The pages you view on this site, and which offer you looked at.
• If you start a checkout or complete a purchase: that it happened, the product, and the amount.
• Their own cookie identifiers, your IP address, and your browser's user agent — the ordinary technical details any web request carries.
• For a completed purchase only, Meta additionally receives a one-way SHA-256 hash of your email address, so they can recognise a customer they have already seen. We never send them the address itself, and a hash cannot be reversed back into one.

A purchase is also reported to Google and Meta from our own server rather than from your browser, using the identifiers listed above that were captured when you accepted. This is standard advertising measurement and it is subject to the same consent: if you declined, no identifiers exist to send and nothing is reported.

To change your mind, clear this site's cookies in your browser and the banner will ask again. Your answer is remembered for six months.

• Account records: for as long as your account is open, and then 12 months after you close it, so that a purchase can be proved if it is disputed.
• Order, payment, and tax records: for as long as tax and accounting law requires us to keep them, which is longer than you may expect and is not something we can shorten on request.
• Mentorship applications and submissions: 24 months for applications, and 7 years for records relating to a paid engagement, which is a tax and liability period rather than a choice.
• Security and audit logs: kept as long as needed to investigate abuse and to show who took a sensitive action.
• Email suppression records: kept indefinitely, because the only way to reliably never email you again is to remember that you asked.

Depending on where you live, you may have the right to access a copy of your information, to correct it, to delete it, to object to or restrict certain processing, to receive it in a portable format, to opt out of its sale or sharing (we do neither), and not to be treated worse for exercising any of these rights.

To exercise any of them, email support@trade142.com from the address on your account. We will respond within 45 days, and will verify your identity before acting on a request, because acting on an unverified deletion request is its own kind of breach.

You can unsubscribe from marketing email at any time using the link in any marketing message, or by asking us. Transactional email about something you bought is not marketing and will keep being sent while you have an active purchase.

On the statutes: we are a small Florida company and most state privacy laws set revenue or volume thresholds we are nowhere near, so they do not currently apply to us by their own terms. We have chosen to give the rights above to everybody anyway rather than sort customers by which state they live in. If you believe a statutory right applies to you that we have not honoured, write to support@trade142.com with the statute named and we will answer you on it; if you are still not satisfied, you keep whatever right to complain to a regulator that your own law gives you.

Passwords are stored using a modern memory-hard hashing algorithm, never in a form we can reverse. Access to production data is limited to the people who need it. Sensitive actions — role changes, manual grants of access, refunds — are recorded with the identity of whoever took them.

No system is perfectly secure, and we will not claim ours is. If we become aware of a breach affecting your information, we will notify you and the relevant authorities as required by law.

This site is not intended for anyone under 18 and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

We are based in the United States and our service providers process information in the United States and potentially in other countries where they operate infrastructure. If you use this site from outside the United States, you are sending your information to the United States, where privacy law differs from your own.

Where information about a person in the United Kingdom or the European Economic Area reaches the United States, our providers rely on the European Commission's Standard Contractual Clauses, the UK Addendum where it applies, or their own certification under the EU-US Data Privacy Framework. We do not offer this service on the basis that it is designed for EU or UK data subjects, and if you need a specific transfer instrument before you buy, ask us before you buy rather than after.

We will update this page when what we do changes. If a change is material — a new category of information, a new purpose, a new subprocessor with access to your content — we will tell account holders by email rather than quietly editing the page.