Terms of Service

1. Introduction and Acceptance

These Terms of Service (“Terms”) constitute a legally binding agreement between you (“User”, “you”) and Grafion (“we”, “us”, “the Platform”), governing your access to and use of the Grafion trading journal and analytics platform, including all associated services, features, and content available at grafion.app.

By creating an account, accessing, or using Grafion in any capacity, you acknowledge that you have read, understood, and agree to be bound by these Terms in their entirety. If you do not agree with any provision of these Terms, you must not use the Platform.

2. Service Description

Grafion is a trading journal and performance analytics platform designed for active traders. The Platform enables users to import, organize, and analyze their trading activity across multiple brokers and asset classes. Core functionality includes trade tracking, performance metrics calculation, journal entries with emotional and strategic annotations, market scanning tools, a public leaderboard with verified rankings, and customizable analytics dashboards.

The Platform is provided as a Software-as-a-Service (SaaS) product. Features and availability may vary depending on subscription tier and are subject to change as the Platform evolves.

3. Account Registration and Eligibility

To create an account, you must:

• Be at least 18 years of age or the age of legal majority in your jurisdiction
• Provide accurate, complete, and current registration information, including your full legal name (first and last name), a valid email address, and your country of residence
• Maintain the confidentiality and security of your account credentials at all times
• Accept these Terms of Service and our Privacy Policy

You are solely responsible for all activity that occurs under your account. You must notify us immediately at security@grafion.app if you suspect unauthorized access to your account.

We reserve the right to verify the information you provide and to refuse, suspend, or terminate any account that contains false, misleading, or incomplete information.

4. Data Protection and Encryption

The security of your personal and financial data is a foundational priority of the Platform. We implement industry-standard and, where applicable, above-standard security measures to protect your information:

• Broker credentials: All API keys, secrets, tokens, and broker authentication data are encrypted at rest using AES-256-GCM (Galois/Counter Mode), an authenticated encryption standard that ensures both confidentiality and integrity. Each credential is encrypted with a unique initialization vector (IV), preventing pattern-based attacks.
• Trade data verification: CSV files used for trade imports are hashed using SHA-256 to produce a cryptographic fingerprint stored immutably. This ensures data integrity and prevents retroactive modification of imported records.
• Authentication: User passwords are hashed using bcrypt with a cost factor of 12, making brute-force attacks computationally infeasible. JSON Web Tokens (JWT) are used for session management with a maximum lifespan of 7 days.
• Transport security: All communications between your browser and our servers are encrypted via TLS 1.2 or higher. HSTS (HTTP Strict Transport Security) is enforced with a maximum age of 2 years, including subdomains and preload directives.
• Infrastructure: Data is hosted on Supabase (PostgreSQL) with Row-Level Security (RLS) policies enforced at the database level. Access to production infrastructure is restricted and audited.

5. Use of Your Data

We are committed to transparent and ethical data practices. The following principles govern how we handle your information:

• No sale of personal data: We will never sell, rent, lease, or trade your personal information, trading data, broker credentials, journal entries, or any other user data to third parties under any circumstances.
• No exploitative use: Your trading data will not be used for proprietary trading, market analysis by third parties, advertising profiling, or any purpose that conflicts with your interests as a user.
• No unauthorized sharing: Your data is not shared with external entities except as strictly necessary for Platform operation (e.g., Stripe for payment processing, Resend for transactional emails) or as required by law.
• Aggregated analytics: We may use fully anonymized and aggregated data to improve Platform features, performance, and reliability. Such data cannot be traced back to any individual user.
• Your data remains yours: You retain full ownership of all trading data, journal entries, and personal information you submit to the Platform. We act solely as a data processor on your behalf.

6. Acceptable Use Policy

You agree not to:

• Fabricate, falsify, or manipulate trading data or performance records
• Use the Platform for any activity that violates applicable local, national, or international law
• Attempt to reverse engineer, decompile, disassemble, or extract the source code of the Platform
• Interfere with, disrupt, or compromise the security, integrity, or performance of the Platform or its infrastructure
• Share, transfer, or disclose your account credentials to any third party
• Use automated tools, bots, scrapers, or crawlers to extract data from the Platform without express written permission
• Impersonate another user, individual, or entity
• Circumvent, disable, or tamper with security features, rate limiting, or access controls
• Upload malicious content, including but not limited to malware, viruses, or code designed to disrupt operations

7. No Financial Advice Disclaimer

Grafion is a data analytics and journaling tool. Nothing on this Platform constitutes, nor should be interpreted as, financial advice, investment recommendations, trading signals, or a solicitation to buy or sell any financial instrument.

All metrics, scores (including the Edge Score), analytics, charts, projections, Monte Carlo simulations, stress tests, and any other data presented on the Platform are provided strictly for informational, educational, and self-assessment purposes.

Trading and investing in financial markets involves substantial risk of loss, including the potential loss of your entire invested capital. Past performance, as tracked by this Platform or any other tool, does not guarantee, predict, or indicate future results. You are solely responsible for your own trading decisions and should consult a qualified financial advisor before making investment decisions.

8. Trade Verification and Leaderboard

The Platform offers trade verification through two mechanisms: broker API connections (Level 2 verification) and CSV hash validation (Level 1 verification). Verification indicates that trade data was imported through a validated channel — it does not constitute an audit, endorsement, or guarantee of trading performance.

Participation in the public leaderboard is entirely optional and requires explicit opt-in. By opting in, you consent to having your selected performance metrics (as configured in your privacy settings) displayed publicly under your chosen handle. You may opt out and remove your leaderboard entry at any time. Grafion reserves the right to remove, suspend, or flag leaderboard entries that appear to violate these Terms or that result from data manipulation.

9. Subscription, Billing, and Promo Codes

Grafion offers free and premium subscription tiers. Premium subscriptions are billed on a recurring monthly basis through Stripe, Inc., a PCI DSS Level 1 certified payment processor. Grafion does not store, process, or have access to your full credit card number.

You may cancel your subscription at any time through the Platform. Cancellation takes effect at the end of the current billing cycle — no partial refunds are issued for unused portions of a billing period. Refunds for exceptional circumstances are evaluated on a case-by-case basis.

Promotional codes grant temporary access to premium features for a specified duration. Promo codes are non-transferable, cannot be exchanged for cash, and may have usage limits or expiration dates. We reserve the right to revoke promo codes that are obtained or used fraudulently.

We reserve the right to modify subscription pricing with a minimum of 30 days advance notice to existing subscribers. Pricing changes do not apply retroactively to active billing cycles.

10. Intellectual Property

The Platform, including its design, source code, algorithms, metrics calculations, branding, and all associated intellectual property, is owned by Grafion and protected by applicable copyright, trademark, and intellectual property laws.

You retain full ownership of your trading data, journal entries, and personal content. By using the Platform, you grant Grafion a limited, non-exclusive license to process your data solely for the purpose of providing and improving the service.

11. Account Deletion and Data Retention

You may request full account deletion at any time through the Settings page. Upon confirmed deletion:

• Your personal profile, broker connections, trades, journal entries, and preferences will be permanently removed from the active database
• A minimal anonymized record (email hash, account creation date, deletion date, and reason) may be retained for up to 90 days for fraud prevention and legal compliance purposes
• Encrypted broker credentials are destroyed immediately and irrecoverably
• Leaderboard entries are removed instantly
• Backup systems may retain encrypted copies for up to 30 days before automatic purge

12. Audit Logging and Transparency

The Platform maintains an internal audit log of security-relevant actions associated with your account, including logins, broker credential changes, trade imports, and data exports. These logs are used exclusively for security monitoring, incident investigation, and compliance purposes. Audit logs are retained for 12 months and are not accessible to third parties except as required by law.

13. Service Availability and Modifications

We strive to maintain high availability and reliability, but the Platform is provided on an “as available” basis. We do not guarantee uninterrupted access and may perform scheduled maintenance, updates, or modifications that temporarily affect availability. We will make reasonable efforts to provide advance notice of planned downtime.

We reserve the right to modify, add, or remove features at any time. Material changes that significantly affect your use of the Platform will be communicated via email or in-app notification with reasonable advance notice.

14. Limitation of Liability

To the maximum extent permitted by applicable law, Grafion and its operators, employees, and affiliates shall not be liable for:

• Any trading or investment losses incurred while using or as a result of using the Platform
• Inaccuracies, errors, or omissions in imported trading data, calculated metrics, or analytics
• Service interruptions, data loss, or security breaches resulting from events beyond our reasonable control
• Indirect, incidental, consequential, punitive, or special damages of any kind
• Actions taken by third-party services integrated with the Platform (brokers, payment processors, etc.)

Our total aggregate liability for any claim arising out of or related to these Terms or your use of the Platform is limited to the total amount you have paid to Grafion in subscription fees during the 12-month period immediately preceding the event giving rise to the claim, or $100 USD, whichever is greater.

15. Indemnification

You agree to indemnify, defend, and hold harmless Grafion and its operators from and against any claims, liabilities, damages, losses, or expenses (including reasonable legal fees) arising from your use of the Platform, your violation of these Terms, your violation of any third-party rights, or any data you submit to the Platform.

16. Governing Law and Dispute Resolution

These Terms shall be governed by and construed in accordance with the laws of the European Union and the applicable national laws of the jurisdiction in which Grafion operates. Any disputes arising from these Terms or your use of the Platform shall be resolved through good-faith negotiation. If negotiation fails, disputes shall be submitted to binding arbitration or the competent courts of the applicable jurisdiction.

17. Severability

If any provision of these Terms is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving its original intent.

18. Changes to These Terms

We reserve the right to update or modify these Terms at any time. Material changes will be communicated to registered users via email or prominent in-app notification at least 15 days before they take effect. Your continued use of the Platform after such notice constitutes acceptance of the revised Terms. If you do not agree with the changes, you must discontinue use and may request account deletion.

19. Contact

For questions, concerns, or requests regarding these Terms, your data, or any aspect of the Platform, contact us at:

• General inquiries: support@grafion.app
• Legal and compliance: legal@grafion.app
• Security concerns: security@grafion.app