Where your data lives

Last updated: October 2026

Your trading journal says a lot about you: your accounts, your results, your mistakes. This page explains where it is stored, what Tradoshi can do with your accounts, and how you stay in control. The full legal framework is in our privacy policy.

In short

Your database is hosted in the European Union, in Ireland.
Tradoshi reads your accounts. It never places an order and never moves money.
Your broker credentials are encrypted and never shown again.
You export your trades whenever you want, and you delete your account yourself.
We do not sell your information.

Where your data is stored

Your account, your journal and your settings are stored in a PostgreSQL database at Supabase. It is hosted by Amazon Web Services (AWS) in the eu-west-1 region, in Ireland, in the European Union.

The app, app.tradoshi.com, is served by Cloudflare. The tradoshi.com website is served by Netlify.

The MetaTrader terminals that read your MT4 and MT5 accounts run on our own server, also located in the European Union.

Your journal, on your device and on our servers

Your journal is kept on your device, in your browser's storage. A copy is kept on our servers: that copy is what lets you find your journal on another device.

If you invite a mentor, they only see what you choose to share with them. Your journal is only public if you publish it yourself.

Read-only: Tradoshi does not touch your money

Tradoshi never places an order and never moves money on a brokerage account: no feature of the app does so.

MetaTrader 4 and 5. We ask for your investor password. At MetaTrader, this password gives read-only access: it cannot be used to place orders.

Crypto exchanges. We ask for a read-only API key. No trading or withdrawal permission is needed.

How your access is protected

In transit: everything travels encrypted, over HTTPS.
Broker credentials: encrypted at rest with AES-256-GCM, with a separate key for MetaTrader passwords. Once saved, they are never shown again.
Your Tradoshi password: it is handled by the authentication service and stored in hashed form. No one at Tradoshi can read it.
Two-factor authentication: you can turn it on with an authenticator app, recovery codes included, in Settings → Security.

Payments

Card payments are processed by Stripe. Your card number does not go through our servers.

Oshi and artificial intelligence

Oshi's analyses (Oshi is the app's AI assistant) go through an artificial intelligence provider. Our privacy policy sets out which data is sent to it and on what terms.

IP addresses

Each sign-in IP address is deleted 90 days after it was last used: an account with no sign-in for 90 days keeps none. They are used only to detect duplicate accounts and abuse.

Export and delete your data

Export. You can export all your trades as CSV at any time, from the Journal.

Delete. You delete your account yourself, from Settings → Security. Your encrypted broker credentials are deleted with it. Invoices are kept for the period required by law. The Delete my account page details what is erased and what is kept.

A question?

Email us at support@tradoshi.com. What we collect, why and for how long is set out in the privacy policy.