Privacy policy

The entity named in your portal is the data controller for your account. Where a group company processes data on its behalf — for example for infrastructure or support — it does so under a written data-processing agreement.

Privacy questions and rights requests go to [email protected]. We respond within 30 days, or sooner where local law requires.

We collect what is necessary to open and operate an account:

• Identity: name, date of birth, nationality, identity document number and images, selfie/liveness capture, signature.
• Contact: email, phone, residential and postal address, preferred language.
• Financial: bank or wallet details, payment references, transaction and trading history, account balances, source-of-funds information.
• Technical: IP address, device and browser, session timestamps, approximate location, authentication events.
• Support: emails, chat transcripts, complaints and attachments.
• Partner: business details, audience information and payout details where you apply as an introducing broker.

• To verify identity and meet AML, sanctions and tax obligations.
• To open and operate accounts, process funding and execute trades.
• To detect fraud, chargeback risk, market abuse and platform misuse.
• To provide support and resolve complaints.
• To calculate partner commission and prevent attribution abuse.
• To send service messages, and marketing where you have opted in.
• To improve the product using aggregated, de-identified usage data.
• To comply with lawful requests from regulators and courts.

We do not sell personal data, and we do not use your identity documents for any purpose beyond verification and legal compliance.

Where GDPR-style rules apply, we rely on: performance of the contract (operating your account), legal obligation (AML, tax, record-keeping), legitimate interests (fraud prevention, product improvement, security) and consent (marketing, optional cookies). You can withdraw consent at any time without affecting prior processing.

Where local law requires a different basis, we apply it and explain it in the onboarding disclosures.

• Identity-verification and liveness providers.
• Payment providers and banks handling deposits and withdrawals.
• Liquidity providers and execution venues, where required to execute or settle.
• Cloud, email and support-platform providers under processing agreements.
• Auditors, insurers and professional advisers under confidentiality.
• Regulators, law enforcement and courts where legally required.
• Your introducing broker, limited to account status and commission data — never documents.

We do not share your identity documents with partners. Where a partner can see client activity, it is limited to the attribution and commission fields needed to reconcile payouts.

Data may be processed in countries other than your own, including by cloud and verification providers. Where required, transfers rely on adequacy decisions or standard contractual clauses, with additional safeguards for sensitive identity data.

Identity, transaction and trading records are kept for at least five years after the account closes, or longer where local law requires. Support transcripts are kept for three years. Marketing preferences are kept until you withdraw consent. Data that is no longer needed is deleted or irreversibly anonymised.

Access is role-based and logged. Passwords are stored as argon2 hashes, session tokens as digests, and MFA is available on every account. Data is encrypted in transit; identity documents are stored in a restricted bucket accessible only to the verification team. We test access controls and review audit logs.

No system is perfect. If a breach affects your data, we notify you and the relevant authority where the law requires it.

Depending on your jurisdiction, you may request access, correction, deletion, restriction, portability or objection to processing, and withdraw marketing consent. Some rights are limited by AML record-keeping obligations.

Send requests to [email protected] from your registered email. We may ask for identity verification before acting. You also have the right to complain to your local data-protection authority.

Essential cookies keep you signed in and protect forms. Optional analytics cookies are only set with consent and are described in the cookie policy. You can change preferences at any time from the cookie banner or browser settings.

We may update this policy to reflect legal or product changes. Material updates are notified by email or in the portal. The date at the top shows the current version.

Contact: [email protected] · Compliance, Candle Key, Mumbai, India. See the contact page for other routes.