Privacy policy

This explains what we collect, why we collect it, and what we do to protect it.

What we collect

• Account details — name, email address, password (stored only as a bcrypt hash, never in readable form).
• Trading account details — broker name, server, account login and trading password, plus the balance, equity and position data we read back from your account.
• Usage and technical data — IP address, approximate location derived from it, browser and device type, pages visited, and the time of each visit. We record login attempts, successful and failed.
• Payment data — the amount, currency, network and transaction reference. We never see or store your card details or your wallet's private keys.

How broker credentials are protected

Placing trades on your account requires your broker trading password. We treat it accordingly:

• It is encrypted with AES-256-GCM before being written to the database, using a key held outside the database.
• Each password is cryptographically bound to the specific trading account record it belongs to, so a stored credential cannot be transplanted onto a different account.
• It is never displayed back to you, never returned by our API, never written to a log file and never included in an error report.
• Deleting a connected account deletes the stored credential.

If your broker offers a trading password separate from your main account password, use it. Never give us a password that also permits withdrawals.

Why we collect it

• To operate your account and deliver the signals you subscribed to.
• To execute trades on accounts you have connected, when you enable it.
• To take payment and manage your subscription.
• To keep the service secure — detecting unauthorised access, abuse and fraud. Login history and approximate location are used for this.
• To meet our legal and accounting obligations.

Who we share it with

We do not sell your data. We share only what is necessary with the providers that run the service: our trade execution provider (to reach your broker), our payment processor, and our email delivery provider. Each receives only the data needed for its function.

We disclose data to authorities where we are legally required to do so.

Cookies

We use a session cookie to keep you signed in and an anonymous identifier to count visitors. We do not use third-party advertising cookies.

How long we keep it

Account and trading records are kept while your account is open and for as long afterwards as we are required to retain financial records. Login and audit logs are kept for a rolling security window. Credentials for a disconnected trading account are deleted at disconnection.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete your account and personal data. Some records must be retained where law requires. Requests can be made through the support section of your account panel.

Contact

Privacy questions can be raised through the support section of your account panel.

Note: this document describes what the platform actually does. It is not legal advice, and it does not yet name a data controller or cover jurisdiction-specific obligations such as GDPR representation. Have it reviewed by a qualified lawyer before taking paying customers.