Privacy Policy
Last updated: June 2026
Your MT5 password is encrypted
MT5 trading passwords are encrypted with AES-256-GCM before they are stored and are used only to monitor and manage your connected account through MetaApi. They are never shown back to you or to your mentor.
1. Information We Collect
- Account & profile: name, email, and (optionally) WhatsApp number and address.
- Trading connection: MT5 account number, broker/prop-firm and server name, and an encrypted MT5 password.
- Subscription & payments: payment method, amount, reference (e.g. transaction hash), and any proof-of-payment screenshot you upload.
- Activity: rule-enforcement events and account metrics generated by the engine.
- Communication preferences: your Email / WhatsApp / Telegram marketing opt-ins.
2. How We Use It
To operate the Service (connect to and govern your MT5 account), verify and activate subscriptions, show you and your mentor your dashboards and activity, send rule and account alerts, and — only where you opted in — send news and offers.
3. Third-Party Processors
We rely on trusted providers to deliver the Service: Supabase (database, authentication, file storage), MetaApi (MT5 broker connectivity), Railway (engine hosting), payment providers for your chosen method, and messaging providers for notifications. Each processes data only as needed to provide their function.
4. Payment Proof Storage
Proof screenshots are stored in a private storage bucket. Only you and the platform mentor can access them, and the mentor views them through short-lived signed links for verification.
5. Data Retention
We keep your data for as long as your account is active and as needed to provide the Service and meet legal obligations. Activity logs are retained as an audit trail. You may request deletion of your account, which removes your profile and connected-account data.
6. Security
We use encryption in transit and at rest where appropriate, encrypt MT5 passwords, and restrict access through database row-level security. No system is perfectly secure, but we take reasonable measures to protect your data.
7. Your Rights
You may access, correct, or request deletion of your personal data, and withdraw marketing consent at any time, by contacting your mentor or the platform administrator.
8. Changes
We may update this Policy from time to time. Material changes will be reflected by the “last updated” date above.