Privacy notice

1. Information we gather

1.1 Details you provide

When you open an account or use the Service, we may collect the following types of information:

• Identity information: your first name, last name and date of birth.
• Contact information: your email address, telephone number and home address.
• Financial information: Broker API credentials restricted to reading and execution, investment choices and risk settings. We do not retain complete broker passwords or full payment-card numbers.
• Account profile: your user identifier, selected strategies and alert preferences.
• Correspondence: messages sent through support channels or by email.

1.2 Information gathered automatically

Use of the Service may automatically produce technical data, including:

• IP address, browser name and version, and operating system.
• Pages opened, tools used, time on site and clickstream information.
• Device identifiers and mobile advertising identifiers where relevant.
• Information about cookies and tracking tools (refer to our Cookie Policy).

1.3 Information supplied by third parties

We may obtain information from identity-check providers, fraud-prevention services and analytics partners. We may compare it with information already held to improve accuracy and security.

2. Uses of information

We may use the information collected to:

• Set up, administer and operate your account and deliver the Service.
• Handle trading signals and automated orders through connected brokers.
• Tailor your experience and present relevant market information.
• Provide service messages, including confirmations, trading updates and security alerts.
• Deliver marketing messages where you consent or applicable law allows.
• Identify, examine and stop fraud or unauthorised access.
• Meet applicable legal and regulatory responsibilities.
• Enhance, test and build Service features with aggregated, anonymised information.

3. Legal grounds for EEA and UK residents

For people located in the European Economic Area or the United Kingdom, personal information is processed on the following legal grounds:

• Contract necessity: to provide the Service you requested.
• Legitimate interests: to secure the Service, prevent fraud and improve the product.
• Legal requirement: to meet financial and tax obligations.
• Consent: for marketing and optional cookies, which you may revoke whenever you choose.

4. When information is shared

We do not sell personal information. We may disclose it to:

• Service providers: cloud, email, analytics and support vendors that are contractually required to safeguard your information.
• Connected brokers and exchanges: only the API instructions needed to carry out your chosen strategy.
• Public authorities: where required by law or court order, or where necessary to protect our legal rights.
• Business transactions: in a merger, acquisition or asset transfer, provided the successor remains bound by this policy.

5. Transfers across borders

DredeR0LLUPETH offers services internationally. Your information can be transferred to and handled in jurisdictions outside your country of residence, including the United States and countries in the European Union. Where applicable, we rely on Standard Contractual Clauses adopted by the European Commission for international transfers.

6. How long we retain data

We keep personal information while your account remains open or as needed to deliver the Service. Following closure, some records may be retained for up to seven years to meet financial regulatory requirements. Aggregated and anonymised analytics may be kept without a fixed end date.

7. Your privacy choices

Subject to your location, you may have the right to:

• Obtain a copy of the personal information we hold about you.
• Request corrections to information that is incomplete or incorrect.
• Request deletion of your information, subject to applicable exceptions (the “right to be forgotten”).
• You can object to particular processing activities or ask us to limit them.
• Data portability — receive your personal data in a structured, commonly used, machine-readable format.
• Consent may be withdrawn whenever you choose; withdrawal does not change the lawfulness of processing carried out beforehand.

To exercise any of these rights, contact us at [email protected]. We normally reply within 30 days.

8. Safeguarding information

We apply protections including TLS 1.3 for data in transit, AES-256 for stored data, multi-factor authentication, role-based permissions and yearly independent penetration testing. No system can be guaranteed completely secure. Use a strong, unique password and turn on two-factor authentication.

9. Cookies and related tools

Cookies and comparable technologies help us run and improve the Service. Further information is available in our Cookie Policy.

10. Privacy of children

The Service is intended for people aged 18 or older. We do not knowingly collect personal data from minors. If you believe a minor has submitted information, notify us and we will take reasonable steps to remove it without undue delay.

11. Updates to this policy

This Privacy Policy may be amended periodically. Material updates will appear on our website or be sent by email. Continuing to use the Service after an update takes effect means you accept the revised policy.

12. Contact information

For privacy questions or requests concerning your rights, please reach our Data Protection Officer:

• Email address: [email protected]
• Postal address: DredeR0LLUPETH Inc. 200 Park Avenue, New York, NY 10166, United States, United States
• Representative in the EU: DredeR0LLUPETH, 200 Park Avenue, New York, NY 10166, United States