Privacy

HevRion is operated by a private individual in Romania, who is the controller of the personal data described here. Write to contact@hevrion.com about anything on this page, including to exercise any of the rights below. That mailbox is read by a person and it is the route to everything.

This is a trading journal. Almost everything it holds is something you typed into it on purpose. There is no advertising, no analytics, no tracking pixels and no third party watching you use the product — the page you are reading loads no script from anybody.

Two buttons in Settings hand you everything back, and a third deletes the account outright. They are described at the bottom, and they work today rather than on request.

Your account holds only what sign-in requires and what you enter:

• Your email address. Signing in is a link sent to it, so there is no password and none is stored.
• Your time zone, because every trading day and trading week in the product is derived from it.
• Your trading records: symbol, direction, entry, exit, stop, target, size, profit and loss, the account balance you told us, and the times you entered and closed.
• What you wrote. The thesis before a trade and the notes after it. This is the most personal material here, and it is treated as such below.
• Your own system: the criteria you chose, your checklist, and which items you completed on which day.
• When you completed a meditation, as two timestamps. Not what you did, not any audio, not any biometric reading — only that a session started and finished.
• Chart screenshots, if you upload any.
• The weekly reviews written for you, and the figures each one was written from.
• Which coins you chose to watch on the market page, and over what period. A list of ticker symbols and nothing else — not a position, not a holding, and not a record that you traded any of them.
• A wallet address or a read-only exchange key, if you connect one under Connected venues, together with the positions read through it. An address is public and secret-free. A key is encrypted before it is written down, and it is stored only after the exchange itself confirms the key cannot place an order and cannot move funds — we ask them again every time we read, and delete the key here if the answer ever changes. Disconnecting deletes both the credential and everything read through it.

Nothing here asks for your name, your date of birth, your address, your nationality, your health or any government identifier, and no field in the database is for one. Please do not put those in a journal note either — a note is prose and the product cannot tell what is in it.

To provide the journal you asked for. That is the basis for everything in the list above: without your trades there is no journal, and without your email address there is no way to let you back in.

The weekly review email is sent because it is the point of the feature rather than a marketing message, and it can be switched off in Settings regardless. No other email is ever sent to you, and your address is never given to anyone for their own purposes.

Keeping the service working and secure — server logs, refusing abusive requests — rests on a legitimate interest in the thing not falling over or being broken into.

Three things here use a model, all of them at Anthropic, in the United States. That is a transfer outside the European Economic Area.

The weekly review. Once a week the product writes a review of how you traded. The figures are computed first, by code, and the model cannot change any of them — it is sent those figures, the symbols you traded, and the thesis and notes you wrote on your trades.

Describing your system. When you tell Rion how you trade, what you type is sent so it can ask the next question, along with the draft it has built with you so far.

Suggesting rules. If you ask for rules to be proposed from a description, that description is sent.

None of them is ever sent your name, your email address or your account identifier. What you wrote arrives as quoted material attached to anonymous figures. It is processed to answer that one request and for nothing else, and it is not used to train a model.

The emotion fields are sent to none of them. How you felt before a trade and how you felt after are the most personal lines in the journal. They stay here, and the forms that ask for them say so.

You can switch the weekly review off entirely, in Settings. No review is then written, nothing is sent for one, and the scheduled job cannot see your account. It does not switch off the other two — those only send when you ask them something. Everything else keeps working: the discipline score, the grading and the market reading are computed here, by code, and none of them uses a model.

That is the whole list. It is kept in the same file as the code that does the sending, so a new one cannot be added without this page changing.

An operator screen shows us the accounts that exist: the email address, the time zone, the plan, the credit balance, when the account was created, how many trades it holds and how much it has stored. It is how somebody gets credits granted or an account deleted on request.

It does not show what you wrote. No notes, no thesis, no trade detail — the database function behind that screen returns none of it, so there is no setting to get it wrong. No operator task requires reading somebody's journal, and a screen that could would be the most sensitive page in the product.

Who has that access is a list of addresses set when the application is deployed, not a switch inside it, and every change an operator makes is written to a log the application can add to and cannot edit or erase.

While the product is closed, the front page offers one field and asks for one thing: an email address, so that you can be told when it opens. This section is about that address, and it applies whether or not you ever have an account.

Nothing else is recorded with it. Not your IP address, not which browser you used, not where you came from, not a name. The address and the moment it arrived, and that is the whole row.

It is held on the basis of your consent, given by submitting the form, and used for exactly one message: the one announcing that the product is open. It is then deleted. It is never passed to anybody, never used to send anything else, and it does not become an account — signing up, when that is possible, is a separate act.

Write to us to be taken off the list and the address is deleted, with no record kept that it was ever there. Keeping a note saying that an address asked to be forgotten would preserve the thing that was asked to be removed.

If somebody else put your address in that form, the same applies and you do not have to explain anything: ask, and it is gone.

Two kinds, and neither is for tracking. The cookies that keep you signed in, set when you use your sign-in link — they are what a session is. And one set on the Brief, described next.

If you zap something on the Brief, this site gives your browser a random identifier so that pressing the button twice does not count twice. It is set at the moment you press it and never before, so a visitor who only reads is never given one. It is a random value and nothing else: not your address, not your IP, not your browser. Clearing your site data removes it and we cannot recognise you afterwards, which is deliberate. The count it protects is a real count of real presses; nothing on this site inflates one.

There are no analytics cookies, no advertising cookies and no third party setting anything, because there is no analytics and no advertising.

For as long as the account exists. A journal whose old entries quietly expire is not a journal, so nothing is deleted on a schedule.

A trade becomes read-only twelve hours after it is closed, and corrections made inside that window are kept alongside the value they replaced. That is deliberate — a record you can rewrite afterwards proves nothing — but it means a trade cannot simply be edited later. If something recorded about you is wrong and locked, write to us and we will correct it.

• Take everything. Settings has a button that downloads every row this account holds as one file, and another that downloads your trades as a spreadsheet — in a format this product’s own importer reads back, so it is a way out rather than a gesture.
• Delete everything. Settings has a button that erases the account. It is immediate and there is no grace period in which it is not really deleted. Your trades, notes, sessions, reviews and uploaded images go, and so does the sign-in identity behind them.
• Correct something, within the twelve-hour window in the product, or by writing to us after it.
• Object, restrict, or complain. You can ask us to stop, and you can complain to your national data protection authority without asking us first.

The database and the servers are in Frankfurt. Chart images, when that feature is switched on, are stored under a European Union jurisdiction chosen so they cannot leave it. The exceptions are the two United States processors named in the table above.

This page is versioned with the code, so its history is the product history. If something changes that affects what is collected or who receives it, the date at the top changes and the account is told — silently widening the list would make every earlier version of this page a lie.