Privacy Policy

Last updated: 2026-04-21. Placeholder — replace with lawyer-reviewed policy.

Data we process

• Account data: email, hashed password, country code.
• Operational data: webhook payloads you send us, signal execution results reported by your EA, heartbeats.
• Technical data: IP address, user-agent, timestamps for security and rate-limiting purposes.

Data we do NOT process

• Your broker account password (we never receive it).
• Your MT5 trading history beyond what your EA explicitly reports back.
• Financial or payment-card data — payments are processed by Paddle (Merchant of Record).

Subprocessors

Supabase/MySQL hosting, Vercel/VPS, Resend (email), Sentry (errors), PostHog (analytics), Paddle (billing), Cloudflare (CDN/DDoS).

Retention

Signals and audit logs are retained for 12 months. Heartbeats for 30 days. You may request account deletion at any time.