Legal
Privacy Policy
Last updated: 14 October 2026
This policy explains what personal data Clear Tape collects, why, and what rights you have. It applies to cleartape.ai, the dashboard at app.cleartape.ai and the Clear Tape app.
1. Who is responsible
The controller of your personal data is Packsy Global B.V., Athenesingel 100, 2548 TH The Hague, the Netherlands, registered with the Dutch Chamber of Commerce under number 99226057. For anything about your data, email [email protected].
2. What we collect
- Account: your email address; if you set one, your password, stored only as a salted hash; if you sign in with Google, the verified email address Google confirms (Google also sends your name and profile picture with the sign-in; we don’t store them). One-time sign-in codes are stored only as hashes, for 10 minutes. Signed-in sessions are stored as hashed tokens with their start, last-use and end times, how you signed in (code, password or Google) and your browser’s user-agent string (the browser and device type).
- Membership: your plan (Free, Tools or Pro), your paid plan’s start and end dates, how you paid (card or WeChat), when you joined and were last active, your referral code, who referred you and your referral credit, whether you have seen the guide and the latest “What’s new” notes, a log of changes to your membership, and notes we add when we handle your membership (for example a WeChat payment).
- Profile: if you answer them, the short questions at your first sign-in (your trading experience, your trading style, your interests and whether you already follow a trading system), and when you answered or chose “Not now”. The tickers you enter for a starter watchlist are added to the watchlist in your browser; we don’t store them.
- Trading systems: the trading approach you chose and the systems you switched on (Clear Tape’s presets by name, systems you built yourself by an internal ID only), and when you last changed them, so every device you use screens with the same systems.
- Sign-up source: recorded once, when you sign up: the campaign tags of the link you arrived with (utm_source, utm_medium, utm_campaign), the name of the website that referred you (its domain only, never the full address), the cleartape.ai page you came from, a referral code if you had one, and your language. It is passed along in the link and in your browser tab’s session storage: no cookie, no IP address, no third-party tracker. Only the people who run Clear Tape see it, mostly as totals per channel.
- Product emails: whether you receive them, the language they are written in and when each one was sent.
- Payments: card payments are handled by Stripe. We receive your Stripe customer and subscription identifiers, the status of your subscription and your payments; we never see your full card number. For WeChat payments we keep the amount, date and the period paid for.
- Use of the paid and AI features: counters of how many AI questions, coach conversations, options and Jev reads, system checks and backtests you have used in the current period (for system checks, which stocks you checked against which system that day, so the same check again isn’t counted twice). The questions you type into the AI assistant and your coach conversation are sent to our AI provider to get an answer; we don’t keep their text on our server (the coach keeps only a fingerprint of each reply, to check the conversation is genuine). Jev reads are logged by stock and time, without your email or any other detail that identifies you, to evaluate their quality.
- Clear Cut: the stocks you pass, add to your watchlist or follow closely, with the time and the price at that moment (and, for stocks you follow, the support and resistance used for your price alerts), and the number of cards you have reviewed today.
- Academy: for each lesson, whether you marked it complete and when, and your best quiz score; for the practice questions, which ones you answered and when, whether each answer was right, your wrong-answer book and your number of right answers per lesson and difficulty.
- Trade journal: the trades you record or import from a broker’s CSV file (ticker, side, dates and times, prices, quantities, fees, stop, targets, system, setup and tags), the account balances you enter, and the notes, reviews and answers you write (thesis, plan adherence, confidence, weekly reviews), the column mapping you choose for a broker’s file, and the AI scores and reviews made at your request. Clear Tape never connects to your brokerage account: we receive only what you enter or upload, and a CSV file is read in your browser, so only the trades in it reach us. The journal is stored under a member ID derived from your email address, never under the email itself, and is visible only to you.
- Saved backtest studies: the studies you save: their title, the system tested (including the rules of a system you built yourself), the test’s settings and stocks, its results without the list of trades, each monthly re-check and whether you want a notification when a verdict changes. They are stored in a file named by a member ID derived from your email address; the file also holds your email address, so that we can notify you about a re-check.
- Comments and likes: the comments you post on stock cards and when, the stocks you like, the comments you report and the display name you choose. They are stored under a member ID derived from your email address, never under the email itself. Other members see your comments under your display name (or an automatic name such as “Member 1234”), never your email. For moderation we also keep which comments were deleted and by whom, and any temporary posting restriction.
- Notifications: if you turn them on, your browser’s push address and keys, the alerts you chose, your language, your browser’s user-agent string and when you subscribed.
- Technical data: your IP address and the requests your browser makes, in our servers’ and Cloudflare’s logs, and in short-lived counters that protect against abuse. We also keep anonymous counts of sign-in page visits per day and of returning members, without any identifier.
- Messages: what you write to us by email or on WeChat.
Your settings (theme, layout, time zone), your watchlist, your screener rules and the rules of the trading systems you build yourself are kept in your own browser, not on our servers; see Cookies. The rules of a system you built reach our server only to run a backtest or a system check with them, or as part of a coach conversation, and we keep them only in the backtest studies you save.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account, signing you in, providing the Free, Tools and Pro features (including Clear Cut and its price alerts), counting allowances | Contract (Art. 6(1)(b)) |
| Taking payments, managing your subscription, refunds, referral credit | Contract (Art. 6(1)(b)) |
| Keeping payment and tax records | Legal obligation (Art. 6(1)(c)): Dutch tax law requires 7 years |
| Answering your questions with the AI features | Contract (Art. 6(1)(b)) |
| Using your profile answers to set the dashboard’s defaults (the order of cards and menu, Clear Cut’s defaults, the guide and the suggested lessons) and the next step it suggests | Contract (Art. 6(1)(b)): optional answers you choose to give |
| Saving the trading systems you switch on, so every device uses the same ones; keeping the backtest studies you save and re-checking them each month | Contract (Art. 6(1)(b)): a feature you choose to use |
| Keeping your Academy progress and practice, to show your progress, your quiz scores and your wrong-answer book | Contract (Art. 6(1)(b)) |
| Keeping your trade journal, computing its statistics and, when you ask, the AI trade score and period review | Contract (Art. 6(1)(b)): a feature you choose to use |
| Showing your comments, likes and display name to other members | Contract (Art. 6(1)(b)): a feature you choose to use |
| Moderating comments (reports, deletions, posting restrictions) | Our legitimate interest in a lawful, respectful community (Art. 6(1)(f)) |
| Security, preventing abuse and fraud (rate limits, sign-in protection, referral checks) | Our legitimate interest in a safe, fair service (Art. 6(1)(f)) |
| Encrypted backups, to restore the service after a failure | Our legitimate interest in not losing your account and data (Art. 6(1)(f)), and our duty to keep data secure (Art. 32) |
| Recording your sign-up source, to learn which pages and campaigns bring new members | Our legitimate interest in improving our site and marketing with minimal data (Art. 6(1)(f)); you can object |
| Product emails: three emails in your first week about getting started, the second one leading with a tool chosen from your profile answers, if you gave any, the last one about the paid plans, Tools and Pro (free members only). On by default only for members who sign up themselves | Our legitimate interest in telling our own members about our similar services (Art. 6(1)(f), with Article 11.7(3) of the Dutch Telecommunications Act); you can unsubscribe in every email or in Settings › Notifications |
| Push notifications | Your consent (Art. 6(1)(a)), which you can withdraw in Settings or your browser at any time |
| Service emails: sign-in codes, receipts, notices about your account or these terms | Contract (Art. 6(1)(b)) |
| Answering your messages | Contract, or our legitimate interest in helping you (Art. 6(1)(b), (f)) |
Apart from the product emails above, which you can turn off at any time, we don’t send marketing emails without your consent. We don’t sell your data, and we don’t use it for advertising. We make no decisions about you by automated means that have legal or similarly significant effects.
4. Who we share it with
We use these service providers. They process data on our behalf and under our instructions (data processing agreements), unless noted:
| Provider | What for | Data | Where |
|---|---|---|---|
| Hetzner Online GmbH | Our servers and their daily backups | Everything we hold on the server | Germany (EU) |
| Cloudflare, Inc. | Hosting the website, network and security in front of the dashboard; uptime checks of our own pages (no personal data) | IP address, request data | Global, including the US |
| Cloudflare, Inc. (Cloudflare R2) | Off-site backups | Everything we hold on the server, encrypted on our server before upload; Cloudflare has no key to read it | The EU (bucket restricted to the EU jurisdiction) |
| Stripe | Card payments and subscriptions. For card subscriptions Stripe is the merchant of record and processes payment data as an independent controller under its own privacy policy | Email, name, billing address, payment details, tax ID if you give one | EU and the US |
| Resend, Inc. | Sending sign-in codes, service emails and product emails | Email address, the email’s content | US |
| Google LLC | Sign in with Google, if you use it | Your Google sign-in | US |
| Anthropic, PBC | The AI assistant, coach, options reads, the system check’s explanation, translations, and the trade journal’s AI score and period review | Your question or coach conversation, and the data the answer needs (market data, today’s analysis and key levels, your plan, and a saved backtest study if you ask the coach about one); for a system check, the stock, the system’s rules and their computed result; for the journal, only when you ask for a score or review: the trade or period’s records, your notes on them, your account balance and your system’s rules; not your email address or name | US |
| TypeSafe | The Stock read (Jev model) | Market data about the stock you asked about; no personal data | US |
| Your browser’s push service (Google, Apple, Mozilla, Microsoft) | Delivering notifications you turned on | Push address, the notification | Mostly the US |
Anthropic processes AI requests under its commercial terms: it does not use them to train its models, and it deletes them automatically within 30 days, unless it must keep them longer to enforce its usage policy or to comply with the law.
Charts and some widgets on the dashboard are embedded from TradingView, and X timelines from X. When they load, these companies receive your IP address and may set their own cookies, as their own controllers; see Cookies. We also share data when the law requires it, for example with tax authorities.
5. Transfers outside the EU
Some providers above are in the United States or have staff there. We transfer data to them only with safeguards: the EU–US Data Privacy Framework where the provider is certified, otherwise the European Commission’s Standard Contractual Clauses. Ask us for a copy of the relevant safeguards.
6. How long we keep it
- Account and membership data, your profile answers, the trading systems you switched on, your Academy progress and practice, your sign-up source and product-email settings: as long as you have an account. When you ask us to delete your account, we delete it within 30 days, together with your comments, likes, display name, Clear Cut history, trade journal, saved backtest studies, push subscriptions and counters.
- Backups: Hetzner’s server backups for 7 days, our encrypted off-site backups for 30 days. Data you or we delete disappears from them as they age out.
- Payment records and invoices: 7 years, as Dutch tax law requires, even after your account is deleted.
- Sign-in codes: 10 minutes. Sessions: up to 30 days if you chose to stay signed in, otherwise up to 12 hours.
- Allowance counters: the current day or month. Coach reply fingerprints: about 3 months.
- Clear Cut: stocks you passed, 7 days; stocks you added or followed, 30 days, or as long as you keep following them.
- Trade journal: until you delete it (a single trade or balance at any time, or all of it on the journal page) or your account is deleted.
- Saved backtest studies: until you delete them (each one on Systems › Backtest) or your account is deleted.
- Comments and likes: until you delete them or your account is deleted. A deleted comment is hidden at once; its text stays in our moderation records until your account is deleted.
- AI requests at Anthropic: up to 30 days, as described in section 4.
- Push subscriptions: until you turn notifications off or your browser ends the subscription.
- Server logs: up to 90 days. Abuse-protection counters: minutes to hours, in memory.
- Emails and messages with you: up to 2 years after the matter is closed.
7. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time (this doesn’t affect what we did before). Where we rely on our legitimate interest, you can object to that use; you can always object to product emails, and the unsubscribe link in each one or the switch in Settings › Notifications does that at once. You can delete your own comments at any time, change your profile answers in Settings › Account, export or delete your trade journal yourself on the journal page, and download or delete your saved backtest studies on Systems › Backtest. To use any of the other rights, email [email protected] from the address you signed up with. We answer within one month.
You can also complain to a data protection authority: in the Netherlands the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the authority where you live or work.
8. Security
All traffic is encrypted (HTTPS). Passwords, sign-in codes and session tokens are stored only as hashes. Off-site backups are encrypted (AES-256) on our server before they leave it, with a key only we hold. Our uptime checks load our own pages and involve no personal data. Access to member data is limited to the people who run Clear Tape.
9. Children
Clear Tape is for adults. We don’t knowingly collect data from anyone under 18.
10. Changes
If we change this policy in a way that matters, we tell you by email or in the app before the change applies. The date at the top shows the latest version.