Privacy Policy
Last updated 27 Jul 2026
1. What we collect
Account details you provide (name, email), authentication data (a hashed password — never stored in plain text), identity verification information where required by law, and the deposit, withdrawal, and allocation records tied to your account.
2. How we use it
To operate your account, process funding requests, show your live allocation, secure the platform (including rate limiting and fraud prevention), verify your identity where required, and send transactional emails about your requests.
3. Cookies
We use a single essential, httpOnly session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies. See the cookie notice for details.
4. Sharing
We do not sell your data. Operational data may be processed by infrastructure providers strictly to run the service. Identity verification (KYC) is handled by a dedicated, self-hosted provider.
5. Retention
Account and transaction records are retained while your account is active. High-frequency equity snapshots are downsampled over time; money-movement records are retained in full.
6. Your rights
You may request access to, correction of, or deletion of your personal data, subject to legal and record-keeping obligations. Contact us through the contact page.
7. Security
Passwords are hashed with bcrypt, sessions are signed and httpOnly, traffic is served over HTTPS, and the database is never exposed to the public internet.