Privacy and data policy

1. Data we collect

1.1 Details you submit

When you open an account or use the Service, we may request or receive the following information:

• Identity information: your first and last name and date of birth.
• Contact information: your email, telephone number and home address.
• Financial information: broker API credentials with read-only or execution permissions, investment choices and risk settings. We do not retain full broker login details or payment-card numbers.
• Account profile: username, strategy choices and notification preferences.
• Correspondence: messages sent through support channels or email.

1.2 Data gathered automatically

Using the Service also results in the automatic collection of certain technical details:

• IP address, browser family and version, and operating system.
• Visited pages, tools used, time on page and clickstream information.
• Device identifiers and mobile advertising identifiers where relevant.
• Cookie and tracking information (refer to our Cookie Policy).

1.3 Information supplied by others

Information may come from identity-check providers, fraud-monitoring services and analytics partners. We may combine those records with information already held to improve reliability and security.

2. Uses of your information

We may use collected information to:

• Open, administer and support your account and deliver the Service.
• Transmit and carry out trading signals or automated orders through linked brokers.
• Tailor your experience and show useful market information.
• Deliver service messages, including confirmations, trade notices and security alerts.
• Send promotional messages when you consent or applicable law permits it.
• Identify, examine and deter fraud or other unlawful conduct.
• Meet legal and regulatory responsibilities.
• Build, test and enhance Service features using aggregated, anonymized information.

3. Processing grounds for EEA and UK users

For people in the European Economic Area or United Kingdom, personal data is processed on these legal grounds:

• Contract performance: to deliver the Service requested through your registration.
• Legitimate interests: including security, fraud prevention and improving the product.
• Legal requirement: including financial-regulation and tax-law compliance.
• Consent: for promotional messages and optional cookies, which you may revoke at any time.

4. Disclosure of information

We do not trade personal information. It may be shared with:

• Vendors: cloud infrastructure, email, analytics and support providers bound by contractual data-protection obligations.
• Linked brokers and exchanges: only the API directions needed to carry out the strategy you configured.
• Government or legal bodies: where legislation, a court order or protection of our rights requires disclosure.
• Corporate transactions: during a merger, acquisition or asset transfer, provided the purchaser continues to honour this policy.

5. Transfers across borders

Cedartrustvex operates internationally. Your personal information may be transferred to and handled in jurisdictions outside Canada, including the United States and countries within the European Union. When applicable, we rely on appropriate contractual safeguards for international data transfers.

6. How long we retain data

We keep personal information while your account remains open or while it is needed to provide the Service. Following closure, some information may be retained for up to seven years to meet financial regulatory duties. Aggregated, anonymized analytics may be kept without a fixed end date.

7. Your privacy choices

Rights available to you may vary by location, but can include the ability to:

• Obtain a copy of the personal information we maintain about you.
• Have incorrect or incomplete information corrected.
• Ask for your information to be erased, subject to applicable exceptions.
• Challenge or limit particular processing activities.
• Receive your information in a structured, machine-readable format.
• Revoke consent at any time, without changing processing already completed.

To make a rights request, email us at . We aim to reply within 30 days.

8. Keeping information secure

We use commonly accepted safeguards, including TLS 1.3 for data in transit, AES-256 for stored data, multi-factor authentication, role-based permissions and yearly independent penetration testing. No system can be guaranteed completely secure. Use a strong, unique password and turn on two-factor authentication.

9. Cookies and similar tools

Cookies and related technologies help us run and enhance the Service. Further information is available in our Cookie Policy.

10. Privacy of children

The Service is intended for people aged 18 or older. We do not knowingly gather information from minors. If you believe a minor has submitted personal data, tell us and we will take steps to remove it promptly.

11. Revisions to this policy

We may revise this Privacy Policy from time to time. Significant changes will be communicated on our website or by email. Continuing to use the Service after the stated effective date means you accept the updated policy.

12. Contact information

For privacy enquiries or rights requests, contact our Data Protection Officer:

• Email address:
• Postal address: Cedartrustvex Corporation, 100 King Street West, Toronto, ON M5X 1A9, Canada, United States
• Representative in the EU: Cedartrustvex, 100 King Street West, Toronto, ON M5X 1A9, Canada