Privacy Policy

1. Introduction

WealthArtist ("Company", "we", "our", or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use Trade Analytics ("the Service"), accessible at ta.wealthartist.com.

This policy is compliant with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We collect the following categories of personal data:

3.1 Account Information

• Email address (required for registration)
• Display name (optional)
• Password (stored as a secure hash — we never store plain-text passwords)
• Timezone preference
• Avatar URL (if provided)

3.2 Trading Data

• MT5 connection credentials (login ID, server — password is encrypted)
• Trade history (tickets, symbols, volumes, prices, profits/losses, timestamps)
• Open positions
• Daily equity snapshots
• Account balances and performance metrics
• Trade notes and tags

3.3 Technical Data

• IP address (for security and rate limiting)
• User agent / browser information
• Session data (login times, active sessions)
• API key usage data

3.4 Communication Data

• Notification preferences
• In-app notification history

4. Lawful Basis for Processing

We process your personal data on the following legal grounds under GDPR Article 6:

• Consent (Art. 6(1)(a)): When you register and accept this Privacy Policy, you consent to the processing of your data for the stated purposes.
• Contractual Necessity (Art. 6(1)(b)): Processing is necessary to provide the Trade Analytics service you requested.
• Legitimate Interests (Art. 6(1)(f)): We process certain data (IP addresses, security logs) to maintain the security and integrity of our service.

5. How We Use Your Data

We use your personal data to:

• Provide, operate, and maintain the Trade Analytics service
• Display your trade history, performance analytics, and portfolio metrics
• Authenticate your identity and maintain session security
• Send email notifications based on your preferences (trade alerts, daily summaries, security alerts)
• Protect against unauthorized access, fraud, and abuse
• Improve and develop new features for the service

6. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share data only in these limited circumstances:

• Account Sharing: If you choose to share your trading account with another Trade Analytics user, they will see the trading data for that specific account based on the permissions you grant.
• Service Providers: We may use trusted third-party services for email delivery, hosting, and infrastructure. These providers process data only on our behalf and under strict contractual obligations.
• Legal Requirements: We may disclose data if required by law, court order, or governmental authority.

7. Data Retention

• Account Data: Retained for as long as your account is active. Upon account deletion, all data is permanently removed.
• Trading Data: Retained for as long as your account is active.
• Session Data: Automatically expired sessions are cleaned up periodically.
• Security Logs: Retained for up to 12 months for security purposes.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access (Art. 15): You can request a copy of all personal data we hold about you.
• Right to Rectification (Art. 16): You can update or correct your personal data via your account settings.
• Right to Erasure (Art. 17): You can permanently delete your account and all associated data from Settings → Data & Privacy.
• Right to Data Portability (Art. 20): You can export all your data in a machine-readable JSON format from Settings → Data & Privacy.
• Right to Restrict Processing (Art. 18): You can request we limit how we process your data by contacting us.
• Right to Object (Art. 21): You can object to the processing of your data for specific purposes.
• Right to Withdraw Consent (Art. 7(3)): You can withdraw your consent at any time by deleting your account or contacting us.

To exercise any of these rights, please contact us at support@wealthartist.com.

9. Data Security

We implement robust security measures to protect your data:

• Passwords are hashed using industry-standard algorithms (bcrypt)
• All data transmission is encrypted via HTTPS/TLS
• JWT-based authentication with token rotation and session management
• Two-factor authentication (TOTP) available for enhanced account security
• Rate limiting on sensitive endpoints to prevent abuse
• Regular security audits and code reviews

10. Cookies & Local Storage

Trade Analytics uses local storage (not traditional cookies) to store authentication tokens for session management. For full details, see our Cookie Policy.

11. International Data Transfers

Your data may be processed on servers outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

12. Children's Privacy

Trade Analytics is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us: