Privacy Policy
7 October 2026
Your trust matters to us. This policy explains, in plain words, what we collect, why, and how we protect it. In short: we collect only what the service needs, and we never sell or give your personal information to anyone.
What we collect
Account data: your email address, and your name and profile picture if you sign in with Google; your member code, language, approximate country (from your connection) and your choices on the site, such as markets, assets and capital. Payment data: your invoices, amounts, transaction IDs and the sending wallet address, which are public on the blockchain anyway. Security data: sign-in sessions, IP address, browser type and basic logs that protect the service from abuse. Connector data: the name you give a signal token, when it was last used, and a one-way fingerprint (hash) of the token, never the token itself. Cloud connection data, only if you choose it: your exchange API key, secret and passphrase (stored encrypted), the limits you set, and a record of the orders placed for you.
What we never collect
We never ask for and never store your exchange or broker passwords, MetaTrader logins, withdrawal-enabled API keys, wallet private keys or recovery phrases, or your bank card details. An exchange API key is stored only if you choose a cloud connection, and then only in encrypted form.
How we use it
To create and run your account, deliver your personal signals and news, confirm your payments, provide support, keep the service secure, prevent fraud and meet legal obligations. We do not use your data for advertising, and we do not build advertising profiles.
We never sell or share your information
We do not sell, rent, trade or give your personal information to anyone. It is shared only, and only as far as needed, with the infrastructure that runs the service (hosting and the Cloudflare network that protects the website, the email service that sends your sign-in codes, Google if you choose Google sign-in, Telegram if you join a group), or when we are legally required to by a valid order of a competent authority, or to protect the safety of our members and the service. Your exchange API key is sent only to the exchange it belongs to.
Cookies
We use only essential cookies that keep you signed in and protect your session. We use no advertising or tracking cookies. The website loads fonts and code libraries from public content networks, which may see your IP address as part of normal web traffic.
Security
All traffic is encrypted with HTTPS. Passwords are stored only as salted hashes and signal tokens only as hashes, and access to our systems is restricted. API keys of cloud connections are encrypted at rest, never shown again in full, and decrypted only in memory to place or close your orders. No system is perfectly secure, but we work hard to protect your information.
Retention and deletion
We keep your data while your account is active. Payment records may be kept for as long as accounting or legal rules require. You can ask us to delete your account and personal data at any time through support, and we will do so unless the law requires us to keep part of it. When you delete a cloud connection, its key is erased from our live database at once, and encrypted copies in our backups are deleted within 30 days.
Your rights
Through our support channel or by email at [email protected] you can ask to see, correct, export or delete your personal data, or ask any question about this policy.
Children
The service is not intended for anyone under 18, and we do not knowingly collect their data.
Changes
We may update this policy. The date of the current version is shown at the top of this page.