Privacy

Last updated 7 October 2026

Afterfill is a voice trading journal. You talk through your trades, and Afterfill keeps your words next to your fills so you can review your process. This page explains what we keep and why, in plain words.

Who runs Afterfill

Afterfill is run by Afterfill from Lithuania, in the EU. Afterfill is responsible for your data on this site. For anything about it, write to privacy@afterfill.app.

What we store

• Your sign-in email. Used to let you in and to keep your journal separate from everyone else’s.
• Your trades. Fills sent by the platforms you connect: account name, instrument, side, size, price, time and fees. The NinjaTrader add-on also sends one-minute candles around each trade for the chart.
• Your notes. Voice recordings, their transcripts, typed notes, journal entries, chart images you add, your strategies, rules, challenges and settings.
• Connections. For Bybit, Binance and TopstepX, the API key you paste. It is encrypted, used only to read your fills, never shown again, and deleted when you disconnect. Afterfill refuses Bybit keys that are not read-only and Binance keys that can withdraw or trade spot; TopstepX keys cannot be limited, so Afterfill only ever reads with them. For Hyperliquid, only your public wallet address.
• Waitlist sign-ups. Email, the optional answers you give and where you heard about us, plus a daily hashed IP to stop spam.

Afterfill never places, changes or cancels orders, and never sees your broker or exchange password.

AI

Transcripts, strategy suggestions and reviews use OpenAI. Before anything is sent, the journal asks for your permission in each session. When you allow it, OpenAI receives:

• your voice recording, to transcribe it;
• your note text and your active strategies, to suggest which setup you described;
• for a daily review, your notes from that day with simple counts (number of trades, wins, losses, rules kept or broken).

Prices, candles and charts are never sent to AI. OpenAI’s API terms say it does not use this data to train its models; it may keep it for a limited time for abuse monitoring, which Afterfill cannot delete. Afterfill never gives trade advice.

Who else handles your data

• Cloudflare hosts Afterfill, stores the database and recordings, and runs the sign-in.
• OpenAI processes AI requests as described above, only when you allow it.

We do not sell your data, show ads, or use tracking or analytics cookies. The only cookie is Cloudflare’s sign-in cookie. Your browser keeps a few preferences (like your microphone choice) on your own device.

How long we keep it

Until you delete it. Deleting a note removes it and its recording. Delete my data removes everything at once. Deleted data can stay in Cloudflare’s database recovery copies for up to 30 days before it is gone for good.

Your choices

• Export: Connections → Your data → Export gives you a copy of your journal, trades and notes.
• Delete: Connections → Your data → Delete my data removes your trades, notes, recordings, journal, strategies and connections, including stored keys. It cannot be undone.
• Correct or ask: edit anything in the journal, or write to us about access, correction, deletion or objecting to processing.

We use your data to provide the journal you asked for (our legal basis is that contract with you) and send it to AI only with your consent. If you are in the EU and think we got something wrong, you can complain to your data protection authority; in Lithuania that is the State Data Protection Inspectorate (VDAI).

If this policy changes in a way that matters, we will tell you in the app before it takes effect.