Privacy statement

1. Information we gather

1.1 Information provided by you

When you create an account or use the Service, we may collect the following types of information:

• Identity details: your first name, family name and date of birth.
• Contact information: your email address, telephone number and home address.
• Financial details: Broker API credentials restricted to viewing data and submitting orders, together with your investment preferences and risk settings. We do not retain complete broker passwords or full payment-card numbers.
• Account details: your username, selected strategies and alert settings.
• Correspondence: messages you send to support or exchange by email.

1.2 Information collected automatically

When you access or operate the Service, we may automatically gather certain technical details:

• Your IP address, browser type and version, and operating system.
• The pages and tools you use, time spent on the platform and actions you take.
• Device identifiers and, where relevant, mobile advertising identifiers.
• Cookie and tracking details (see our Cookie Policy).

1.3 Information obtained from third parties

Information may come to us from identity-check providers, fraud-prevention services and analytics partners. We may combine it with information we already hold to improve dependability and safeguard the Service.

2. How we use information

Collected information may be processed to:

• Set up, administer and deliver your account and the Service.
• Handle trading signals and automated orders through brokers you connect.
• Personalise your experience and show pertinent market information.
• Provide service messages, including confirmations, trading alerts and security notifications.
• Send promotional messages where you have opted in or where permitted by applicable law.
• Identify, investigate and prevent fraud or unlawful activity.
• Comply with applicable legal and regulatory responsibilities.
• Build, test and improve the Service with aggregated, anonymised information.

3. Lawful grounds for processing (EEA and UK users)

For people in the European Economic Area or the United Kingdom, we process personal data on these legal grounds:

• Contract performance: to provide the Service you request when opening an account.
• Legitimate interests: to combat fraud, secure the platform and improve our services.
• Legal requirement: to satisfy financial-law and tax obligations.
• Consent: for marketing and optional cookies, which you can withdraw whenever you choose.

4. Circumstances in which information is shared

We do not sell personal information. It may be shared with:

• Service providers: cloud hosting, communications, analytics and customer-support providers that are contractually required to protect your information.
• Connected brokers and exchanges: only the API instructions needed to run the strategy you have set up.
• Public authorities: when disclosure is required by law or court order, or reasonably needed to establish, exercise or defend our legal rights.
• Corporate transactions: if we merge with another organisation, are acquired or sell assets, provided the recipient offers protections materially equivalent to those set out in this policy.

5. Transfers of information abroad

Trustaris. Inc. serves customers in multiple jurisdictions. Your information may be processed or moved outside your country of residence, including to the United States and EU Member States. Where required by law, such transfers rely on Standard Contractual Clauses adopted by the European Commission.

6. How long we keep data

We keep personal information for as long as your account remains open and for as long as necessary to deliver the Service. Once an account is closed, certain records can be retained for up to seven years when financial or legal requirements make this necessary. Statistical or anonymised data may be retained without a fixed end date.

7. Rights relating to your personal data

Depending on where you live and the laws that apply, you may have the right to:

• Request a copy of the personal information we hold about you.
• Ask us to correct information that is wrong, incomplete or no longer current.
• Request deletion of your personal information, also known as the “right to be forgotten” in some circumstances.
• Challenge certain processing or ask us to limit the way your information is handled.
• Obtain your information in a structured, commonly used, machine-readable form.
• Withdraw consent whenever you choose; this will not affect processing carried out lawfully before withdrawal.

To submit a data protection request, email [email protected]. We generally respond within 30 days.

8. Keeping your information secure

We use measures such as TLS 1.3 for data in transit, AES-256 encryption for stored information, multi-factor authentication, permissions based on user roles and yearly independent penetration testing. No internet-based service is entirely risk-free. Use a unique, robust password and switch on two-factor authentication.

9. Cookies and comparable technologies

Cookies and similar technologies help us run and improve the Service. Further information is available in our Cookie Policy.

10. Privacy for children

The Service is only available to individuals aged 18 or above. We do not knowingly gather personal information from children. If you think a child has sent us information, please get in touch so that we can assess its prompt removal where suitable.

11. Updates to this policy

This Privacy Policy may be updated periodically. Significant changes may appear on the website or be communicated by email. If you continue using the Service once an update takes effect, you will be treated as having accepted the revised terms.

12. How to contact us

For privacy questions or requests about your data rights, please contact our Data Protection Officer:

• Email address: [email protected]
• Registered office: Trustaris. Inc 200 Park Avenue, New York, NY 10166, United States, United States
• EU representative: Trustaris., 200 Park Avenue, New York, NY 10166, United States