Privacy Policy

1. Data we collect

We collect the following categories of information:

• Name — provided when you register or update your profile.
• Email address — used for account access, billing notices, and support.
• Trading account information — broker or platform credentials, account identifiers, connection settings, and status you store in the account vault to enable automation and copy trading.
• IP addresses — collected automatically for security, fraud prevention, and service reliability.
• Payment information — subscription plan, billing interval, invoices, and payment status. Payment credentials (such as card, bank, or e-wallet details) are collected and processed by Xendit on their secure hosted checkout; we do not store full payment credentials on our servers.
• Automation and usage data — TradingView webhook payloads, signals, order instructions, execution logs, trade history, audit records, and technical logs.

2. Why we collect data

We use your information to:

• Create and manage your Tradator account and workspace
• Provide account management, copy trading automation, and TradingView webhook execution you configure
• Connect to authorized brokers or platforms and transmit instructions you set up
• Process subscriptions and payments through Xendit
• Send service, security, and billing communications
• Monitor system health, prevent abuse, and improve the platform
• Comply with legal, tax, and regulatory obligations

We process data based on contract performance (providing the service), legitimate interests (security and improvement), legal obligations, and your consent where required.

3. How we share data

We do not sell your personal information. We may share data with:

• Xendit — payment processing and subscription billing
• Hosting and infrastructure providers — operating the platform
• Brokers and trading platforms — when you authorize a connection and automation runs
• Authorities — when required by law, regulation, or valid legal process

4. How long we keep data

• Account data — retained while your account is active and for up to 90 days after deletion request processing, unless a longer period is required by law.
• Trading and automation logs — retained while your account is active and typically for up to 12 months after account closure for dispute resolution and audit purposes, unless you request earlier deletion where permitted.
• Billing records — retained as required for tax, accounting, and payment compliance (typically up to 7 years where applicable).
• Security logs (including IP addresses) — typically retained for up to 12 months.

We delete or anonymize data when it is no longer needed for the purposes above.

5. How to request access or deletion

You may request access, correction, export, or deletion of your personal data by emailing support@tradator.app from your registered email address. We will verify your identity before fulfilling requests.

We will respond within the timeframe required by applicable law. Deletion may be limited where we must retain data for legal, security, or billing compliance. You can also cancel your subscription and remove connected accounts from your workspace at app.tradator.app.

6. Philippines — Data Privacy Act (NPC)

If you are in the Philippines, your personal data is processed in accordance with the Data Privacy Act of 2012 and relevant issuances of the National Privacy Commission (NPC). You have rights to be informed, access, object, erasure or blocking, damages, and data portability, subject to legal limitations.

To exercise these rights or raise a concern, contact support@tradator.app. You may also file a complaint with the NPC if you believe your rights have been violated.

7. European users — GDPR

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your data under the General Data Protection Regulation (GDPR) and equivalent UK law where applicable.

You may have the right to access, rectify, erase, restrict processing, object, data portability, and withdraw consent. You may lodge a complaint with your local data protection authority. Contact support@tradator.app for requests.

8. Security and cookies

We use encryption, access controls, and organizational safeguards to protect sensitive data, including trading account credentials. We use cookies and similar technologies for authentication, preferences, analytics, and security.

9. International transfers

Your data may be processed in countries other than your own, including where our service providers operate. We take steps designed to ensure appropriate safeguards for cross-border transfers.

10. Children

Tradator is not intended for anyone under 18. We do not knowingly collect personal data from children.

11. Changes and contact

We may update this policy on https://tradator.app with a revised effective date. Questions: support@tradator.app.