Privacy Policy

1. Who We Are

TradeDonor (“we”, “our”, “us”) operates the TradeDonor Cloud dashboard and trading-operations software, including the APEX Execution Agent, a MetaTrader 5 Expert Advisor (EA) software component. We are committed to protecting your personal data and respecting your privacy.

For questions, contact us at [email protected].

2. Data We Collect

• Account data: name, email address, hashed password.
• Trading data: EA heartbeats (balance, equity, P&L, trade logs) sent from your MetaTrader 5 or NinjaTrader terminal.
• License data: EA license keys, machine activations, expiry dates.
• Usage data: login timestamps, dashboard activity (no behavioral tracking or ad pixels).
• Technical data: IP address (used for rate limiting only, not stored long-term).

3. How We Use Your Data

• Provide, operate, and improve the TradeDonor platform.
• Authenticate your account and protect against unauthorized access.
• Send transactional emails (email verification, password reset, license alerts).
• Display your trading data on your personal dashboard.
• Enforce license terms and prevent abuse.

We do not sell your data, share it with advertisers, or use it for automated profiling.

4. Data Storage & Security

Your data is stored in Supabase (PostgreSQL, hosted on AWS). All data is encrypted at rest and in transit (TLS). Passwords are hashed using bcrypt with cost factor 12. We cannot recover your password.

We implement rate limiting on authentication endpoints to protect against brute-force attacks.

5. Third-Party Services

Each provider has its own privacy policy and data processing agreement.

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access: Request a copy of all data we hold about you.
• Rectification: Correct inaccurate data via your account settings.
• Erasure: Request deletion of your account and all associated data.
• Portability: Request an export of your trading data in JSON format.
• Restriction: Request we stop processing your data.

To exercise these rights, email [email protected]. We respond within 30 days.

7. Data Retention

We retain your account data for as long as your account is active. When you request deletion, your account is deactivated and your data is held for a 30-day restoration window so you can change your mind. After that window, your personal data (including trade logs and heartbeat data) is permanently removed.

Two exceptions apply. Records we are required to keep for legal, financial, or audit purposes, such as billing and transaction records, are retained for up to 7 years before deletion, even after your account is removed. Any provisioned compute tied to your account (such as a managed VPS) is suspended and held for a short grace period before it is destroyed. Restoring your account within the window rebuilds it from the retained configuration.

8. Cookies

Strictly necessary cookies, including an HTTP-only session cookie (td_session) used to authenticate your session, are always active because the platform cannot function without them. Any optional cookies (functional, analytics, performance, or advertising) load only after you consent to that category.

You choose which categories to allow in our cookie banner when you first visit, and you can change or withdraw your choice at any time using the Cookie Preferences link. We do not sell your data or share it with advertisers.

9. Changes to This Policy

We may update this policy. Material changes will be communicated by email to your registered address. Continued use of TradeDonor after changes constitutes acceptance.