Privacy Policy

Last updated: 4 July 2026

1. Who this policy covers

This policy explains how we handle personal data in two separate contexts: (a) this marketing website, and (b) the self-hosted NextScalp Journal application. They are deliberately kept apart.

2. The journal application (self-hosted)

The NextScalp Journal application runs on infrastructure that you control. When you use it:

• Your Binance API keys, trade fills, positions, and P&L are stored locally on your machine and are processed there.
• We (the authors) do not receive, see, or store your keys, your trades, or your P&L. There is no central server that this data is sent to.
• Read-only API keys are recommended. The journal does not need withdrawal or trading permissions and never initiates trades.
• If you enable the optional private AI features (per-trade AI audit or AI coach), the specific trade data you choose to analyze is sent to the third-party AI provider you configure, using your own API key. That request is governed by that provider's privacy policy. If you do not enable AI features, no trade data leaves your box.

3. This website (journal.nextscalp.com)

When you interact with this landing page, limited data may be processed:

• Early-access email. If you email journal@nextscalp.com to request early access, we keep your email address and message to reply and to notify you when the journal is available. We do not sell or share it.
• Server and CDN logs. Our static host may log standard request metadata (IP address, user agent, timestamp) for security and operational purposes, retained for a limited period.
• Privacy-friendly analytics. We use a self-hosted Umami instance to count page views and referrers. It is cookieless, sets no persistent identifiers, does not track you across sites, and collects no personal data — which is why this page shows no cookie banner. Analytics runs only on this landing page, never inside the journal application.

4. What we do not do

• We do not custody funds and never have access to your exchange account beyond the read-only API scope you grant to your own local install.
• We do not sell or rent personal data.
• We do not run invasive third-party advertising trackers on this page.

5. Your rights

For data we hold (essentially: an early-access email you sent us), you may request access, correction, or deletion at any time by emailing journal@nextscalp.com. Because your journal data lives on your own machine, you control it directly — delete the local install and the data is gone.

6. Changes

We may update this policy as the product evolves. Material changes will be reflected by the “last updated” date above.

7. Contact

Questions about privacy: journal@nextscalp.com. Security reports: support@nextscalp.com (see security.txt).