Limbix Brain IconLimbix
LEGAL

Privacy Policy

Effective Date: 28 May 2026

1. Who we are

This Privacy Policy describes how Limbix (“Limbix”, “we”, “us”, “our”) collects, uses, stores, shares, and protects your personal data when you use the Limbix web application, mobile applications, public website, and related services (together, the “Service”).

Limbix is a behavioral trading journal that helps active traders link every trade to a documented plan, score their discipline, and reflect on their decisions with the help of an AI coach. To do that, we process personal data — including trade data, journal entries, and behavioral signals you choose to provide.

Data controller
Limbix SAS
Contact email
[email protected]
Data Protection Officer
[email protected]
EU representative (Art. 27 GDPR)
[To be appointed for non-EU users where required]
Registered address
[Registered address to be inserted prior to public launch]
PLAIN-ENGLISH SUMMARY

We collect what we need to run a trading journal: your account info, the trades you log or import, the journal entries you write, and the behavioral metadata you choose to attach (emotion tags, screenshots, notes). We do not sell your data. We do not train AI models on your data by default. We let you export everything, delete everything, and choose where it lives.

2. Scope and applicable law

This Policy applies to all users of the Service, anywhere in the world. Depending on where you live, additional rights and protections may apply, including under:

  • The EU General Data Protection Regulation 2016/679 (GDPR), and the UK GDPR for users in the United Kingdom.
  • The California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, CCPA/CPRA).
  • Other state privacy laws in the United States (Colorado, Connecticut, Virginia, Utah, Texas, and similar).
  • Canadian PIPEDA, Brazilian LGPD, and equivalent regimes in other jurisdictions.

Where local law conflicts with this Policy and grants you stronger rights, those rights apply.

3. Personal data we collect

We organize the data we hold about you into the categories below. We collect data directly from you, from your use of the Service, and (where you authorize it) from connected third-party services.

3.1 Account & identity data

  • Email address (required for account creation).
  • Password — stored only as a salted hash; we cannot recover it.
  • Full name (optional; for billing and support).
  • Profile photo (optional).
  • Timezone, locale, and language preference.
  • If you sign up via Google or another OAuth provider: your provider user ID, name, email, and avatar URL.

3.2 Subscription & billing data

  • Subscription tier (Essential / Pro / Ultimate), billing cycle, and renewal status.
  • Country and ZIP/postal code for tax determination.
  • VAT/GST number if you provided one.
  • Invoice history (we keep invoice metadata for legal and accounting purposes; see §10 retention).
  • Card details and bank details are NEVER stored by us. Payments are processed by Stripe and tokenized at their end; we receive only a non-reversible reference token, the card brand, the last four digits, and the expiration month/year for display purposes.

3.3 Trading data — the content of the Service

This is the core data that makes Limbix work. You provide it, or you authorize Limbix to receive it on your behalf.

  • Trades — symbol, side, entry/exit prices, quantity, fees, P&L, timestamps, and any free-text notes you attach.
  • Trading accounts — broker names, account nicknames, asset class, account size, currency. We do NOT store broker credentials; broker connections are scoped read-only OAuth tokens.
  • Prop firm accounts — firm name, account size, stage (evaluation / funded), purchase price, payout history, costs paid (resets / add-ons).
  • Playbooks — the names, descriptions, rules, and risk parameters of your trading setups.
  • Notebook entries — rich-text journal content you write or dictate, including any images you paste.
  • Tags and emotion labels you attach to trades and entries.
  • Screenshots and chart images you upload.
  • Rule-compliance records and discipline scores computed from your trades.

3.4 AI Coach data

  • Prompts you send to the AI Coach (questionnaire answers, conversational messages, voice transcripts).
  • Responses generated for you by the AI Coach.
  • Sentiment analyses, risk flags, key-phrase extractions, and behavioral profiles derived from your notebook entries and trade history.
  • Pre-trade and post-trade check-in answers.
  • Aggregated usage counters (number of AI interactions per billing cycle) for quota enforcement and cost tracking.
IMPORTANT — MODEL TRAINING

By default we do NOT use your trading data, journal entries, or AI conversations to train any machine-learning model — ours or any third party's. You can verify this setting at any time in Settings → Privacy & Data. If you choose to opt in to share anonymized snippets for prompt-quality improvement, that toggle is OFF by default, and you can switch it off again at any time.