Privacy Policy

1. Data Controller

Trader AI, Inc. ("we", "us", or "our") operates the website www.traderai.com and the associated mobile applications (collectively, the "Service"). We are committed to protecting the privacy and security of your personal information.

Our registered office is located at:

Our Data Protection Officer can be reached at the above address or via email at [email protected].

2. Data Collection

We collect various types of information to provide and improve our services to you. This section explains what data we collect and how we collect it.

2.1 Information You Provide

• Account Information: When you register, we collect your name, email address, phone number, and country of residence.
• Identity Verification: To comply with anti-money laundering (AML) regulations, we may collect government-issued identification documents, proof of address, and biometric data.
• Financial Information: Payment method details, bank account information, and transaction history.
• Communication Data: When you contact our support team, we collect the content of your communications and any files you share.

2.2 Information Collected Automatically

• Usage Data: IP addresses, browser type, operating system, device identifiers, pages visited, time spent on pages, and click patterns.
• Trading Data: Order history, trading preferences, portfolio holdings, and performance metrics.
• Location Data: Approximate geographic location based on IP address for regulatory compliance.
• Technical Data: Access times, error logs, crash reports, and diagnostic data.

2.3 Information from Third Parties

We may receive information from third parties such as identity verification services, credit reference agencies, blockchain analysis providers, and public databases. This information helps us verify your identity, assess risk, and maintain the security of our platform.

3. How We Use Your Data

Your personal data is used for the following purposes:

3.1 Service Provision

We use your information to create and manage your account, process transactions, provide customer support, and deliver the services you request. This includes executing trades, calculating portfolio values, and generating performance reports.

3.2 Identity Verification and Compliance

As a regulated financial service provider, we are required to verify the identity of our users and monitor transactions for suspicious activity. Your data helps us comply with anti-money laundering (AML) laws, know-your-customer (KYC) requirements, and other regulatory obligations.

3.3 Personalization and Improvements

We analyze usage patterns to personalize your experience, recommend features you might find useful, and improve our platform's performance. This includes showing relevant market insights, customizing your dashboard, and optimizing our trading tools.

3.4 Marketing Communications

With your consent, we may send you promotional emails about new features, market updates, and special offers. You can opt out of marketing communications at any time by adjusting your notification preferences or clicking the unsubscribe link in our emails.

3.5 Security and Fraud Prevention

We use your data to detect and prevent fraud, unauthorized access, and other security threats. This includes monitoring for unusual trading patterns, implementing two-factor authentication, and conducting security investigations when needed.

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR) and similar data protection laws, we process your personal data based on the following legal grounds:

• Contract Performance (Article 6(1)(b)): Processing necessary to provide you with our services, including account creation, transaction processing, and customer support.
• Legal Obligations (Article 6(1)(c)): Processing required to comply with our legal obligations under AML, KYC, and financial regulations.
• Legitimate Interests (Article 6(1)(f)): Processing for fraud prevention, network security, and direct marketing (where permitted by law).
• Consent (Article 6(1)(a)): Processing based on your explicit consent for marketing communications and optional data processing activities.

5. Your Rights

You have the following rights regarding your personal data:

5.1 Right of Access

You can request a copy of the personal data we hold about you. We will provide this information within 30 days of your request. The access request can be submitted through your account settings or by contacting our privacy team.

5.2 Right to Rectification

If you believe the personal data we hold is inaccurate or incomplete, you can request correction. We will update your records promptly and notify any third parties with whom we have shared the data if required.

5.3 Right to Erasure

You can request deletion of your personal data, subject to legal retention requirements. We will honor your request unless we have a legal obligation to retain the data (e.g., for regulatory compliance or ongoing investigations).

5.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer your data to another controller where technically feasible.

5.5 Right to Object

You can object to processing based on our legitimate interests. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

5.6 Right to Restrict Processing

You can request that we restrict processing of your data in certain circumstances, such as when you contest the accuracy of the data or when you have objected to processing.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Here are our standard retention periods:

• Account Data: 5 years after account closure for regulatory compliance
• Transaction Records: 7 years per financial regulations
• Marketing Preferences: Until you withdraw consent
• Technical Logs: 12 months for security purposes
• KYC Documents: 5 years after account closure

When the retention period expires, we will securely delete or anonymize your data. Where data is anonymized, we will ensure it can no longer be linked to you.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate our platform and enhance your experience. Cookies are small text files stored on your device.

7.1 Essential Cookies

These cookies are necessary for the basic functionality of our website. They enable core features like account login, security, and transaction processing. Disabling these cookies may affect your ability to use our services.

7.2 Analytics Cookies

We use analytics tools like Google Analytics and Mixpanel to understand how visitors use our platform. These cookies collect information about page visits, session duration, and navigation patterns to help us improve our services.

7.3 Marketing Cookies

With your consent, we use marketing cookies to deliver personalized advertisements based on your interests. These cookies track your browsing activity across different websites to build a profile of your preferences.

7.4 Managing Your Preferences

You can manage your cookie preferences through our Cookie Settings panel or your browser's privacy settings. Note that disabling certain cookies may impact your user experience.

8. Data Security

We implement robust technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3
• Data at Rest: Sensitive data is encrypted using AES-256 encryption
• Access Controls: Role-based access controls limit employee access to data on a need-to-know basis
• Multi-Factor Authentication: Required for account access and sensitive operations
• Regular Audits: Annual third-party security audits and penetration testing
• Incident Response: Established procedures for responding to data breaches

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you within 72 hours in accordance with GDPR requirements.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States where our primary servers are located. When we transfer data internationally, we ensure adequate protection through:

• Standard Contractual Clauses: Approved by the European Commission for transfers from the EU
• adequacy Decisions: Transfers to countries with adequate data protection as determined by relevant authorities
• Binding Corporate Rules: Internal policies approved by data protection authorities

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by:

• Posting a notice on our website
• Sending an email to your registered address
• Displaying a banner in our mobile application

Changes take effect 30 days after notification. We encourage you to review this policy regularly to stay informed about how we protect your data.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

Last Updated: May 2024