We collect only the information necessary to deliver our services safely and lawfully:

• Identity & KYC data — full name, date of birth, nationality, government-issued ID, proof of address, and any additional documents required by anti-money-laundering (AML) regulations.
• Contact data — email, phone number, and preferred communication channels.
• Trading account data — broker name, account number, and read/execute API tokens (never withdrawal credentials).
• Consent & audit records — the version of legal documents you accepted, the date, time, IP address, user agent, and app version at the moment of acceptance.
• Technical data — IP address, device information, browser type, and pages visited, collected via standard server logs and privacy-respecting analytics.

• To onboard you, verify your identity, and meet regulatory KYC/AML obligations.
• To connect to your broker and execute trades according to the strategy you selected.
• To display your performance analytics to you inside your investor portal.
• To communicate with you about your account, service updates, and legal changes.
• To detect, prevent, and investigate fraud, abuse, or security incidents.
• To keep an immutable audit trail of your consent to our legal documents.

We process personal data on the basis of (a) performance of the contract with you, (b) compliance with our legal obligations, (c) our legitimate interests in operating a secure trading platform, and (d) your explicit consent where required.

Your data is stored on managed, encrypted infrastructure. Access is limited to authorised personnel on a need-to-know basis, protected by role-based access controls and audit logging. Sensitive credentials such as broker API tokens are stored encrypted at rest.

We never sell your personal information.

We share your information only with:

• Your chosen broker, strictly to execute trades on your behalf.
• Regulated KYC/AML providers, to verify your identity.
• Infrastructure providers (hosting, database, email) bound by confidentiality obligations.
• Competent authorities, when legally required.

We retain personal data only as long as necessary for the purposes described above, or as required by applicable law. KYC records are typically retained for the minimum statutory period after account closure.

• Right of access to your personal data.
• Right to correct inaccurate or incomplete data.
• Right to erasure, subject to legal retention obligations.
• Right to restrict or object to processing.
• Right to data portability.
• Right to withdraw consent at any time (without affecting prior lawful processing).
• Right to lodge a complaint with a data protection authority.

To exercise any of these rights, contact investor relations from the email registered on your account.

We use only essential cookies required for authentication and platform functionality, plus optional privacy-respecting analytics. You can disable cookies in your browser at any time.

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email, and the version number and effective date shown above will be updated.