Privacy policy

1. What we collect

• Account data: name, email address, country, stated experience level.
• Trading connection data: broker name, server, account number, and a trading password stored encrypted. Staff decrypt the password only to install your robot, and each access is logged. We do not collect withdrawal credentials.
• Performance data: trades, balances and equity history generated by your robot.
• Technical data: IP address, browser and device information, and authentication events, retained for security auditing.

2. Why we collect it

• To operate the robot you selected and display its results to you (contractual necessity).
• To secure your account and detect unauthorised access (legitimate interest).
• To bill you where you hold a paid plan (contractual necessity).
• To meet legal and accounting obligations (legal obligation).

We do not sell personal data, and we do not share it with advertisers. Aggregated, anonymised performance statistics may be published; they never identify an individual client.

3. Where it is stored

Data is held in an encrypted Postgres database with row-level security, meaning each client’s records are isolated at the database layer rather than only in application code. Trading credentials are encrypted with a key held outside the database. Backups are encrypted and retained for 30 days.

4. How long we keep it

• Account and trading data: for the life of your account, then 90 days after closure.
• Billing records: seven years, as required for accounting.
• Security and audit logs: 12 months.

5. Your rights

You may request access to your data, correction, deletion, or a machine-readable export at any time by emailing us. Trade history is exportable directly from your dashboard without asking. Where GDPR or a comparable regime applies, you also have the right to object to processing and to complain to your supervisory authority.

6. Cookies

We use a single strictly necessary cookie to keep you signed in. We do not use advertising or cross-site tracking cookies. If analytics are added later, they will be privacy-preserving and disclosed here first.

7. Sub-processors

We use third parties for hosting, database, email delivery and payment processing. A current list is available on request, and we will publish it here before launch. Each is bound by a data processing agreement.