Privacy statement

1. Information collected

1.1 Information you submit

When you create an account or use the Service, we may collect these categories of information:

• Identity details: your given name, family name and birth date.
• Contact details: your email, phone number and residential address.
• Financial details: Broker API credentials limited to reading and execution, investing selections and risk preferences. We do not keep complete broker passwords or full card numbers.
• Profile information: your user ID, chosen strategies and notification preferences.
• Communications: messages you send through support channels or email.

1.2 Data collected automatically

Using the Service may generate technical information automatically, including:

• IP address, browser type and version, plus operating system.
• Pages viewed, tools accessed, time spent and clickstream data.
• Device identifiers and, where applicable, mobile advertising identifiers.
• Cookie and tracking-tool information (see our Cookie Policy).

1.3 Data received from third parties

Information may come from identity-verification providers, fraud-screening services and analytics partners. We may match it with existing records to improve accuracy and security.

2. How information is used

The information we collect may be used to:

• Create, manage and operate your account and provide the Service.
• Process trading signals and automated orders through linked brokers.
• Customise your experience and show pertinent market information.
• Send service communications, including confirmations, trading notices and security alerts.
• Send marketing communications when you consent or the law permits.
• Detect, investigate and prevent fraud or unauthorised entry.
• Comply with applicable legal and regulatory duties.
• Improve, test and develop Service features using aggregated, anonymised data.

3. Legal bases for EEA and UK users

For individuals in the European Economic Area or the United Kingdom, personal data is processed on these legal bases:

• Performance of a contract: to deliver the Service you have requested.
• Legitimate interests: to protect the Service, combat fraud and improve the product.
• Legal obligation: to satisfy financial and tax requirements.
• Consent: for marketing and optional cookies, which you can withdraw at any time.

4. Disclosure of information

We do not sell personal data. We may share it with:

• Service providers: cloud, email, analytics and support suppliers contractually obliged to protect your information.
• Linked brokers and exchanges: only the API commands required to execute the strategy you selected.
• Government bodies: when required by law or court order, or when needed to protect our legal rights.
• Corporate transactions: during a merger, acquisition or transfer of assets, provided the successor continues to follow this policy.

5. International data transfers

Syntex AI Inc. provides services internationally. Personal information may be transferred to and processed in countries outside your place of residence, including the United States and European Union member states. Where relevant, international transfers rely on Standard Contractual Clauses adopted by the European Commission.

6. Data retention

We retain personal data for as long as your account is active or as required to provide the Service. After an account closes, certain records may remain for up to seven years to satisfy financial regulatory obligations. We may keep aggregated, anonymised analytics indefinitely.

7. Managing your privacy preferences

Depending on where you live, you may be entitled to:

• Ask for a copy of the personal information in our possession.
• Have inaccurate or incomplete information corrected.
• Ask for your information to be erased, subject to legal exceptions (the “right to be forgotten”).
• Object to certain processing or request that we restrict how it is carried out.
• Data portability — obtain your personal information in a structured, widely used, machine-readable form.
• You may revoke consent at any time; doing so does not affect processing that was lawful before withdrawal.

To make a request under these rights, please contact us at [email protected]. Our usual response time is 30 days.

8. Protecting your information

Our safeguards include TLS 1.3 for information in transit, AES-256 encryption for stored data, multi-factor authentication, role-based access and annual independent penetration testing. No technology can be guaranteed fully secure. Choose a strong, unique password and enable two-factor authentication.

9. Cookies and similar technologies

Cookies and related technologies support the operation and improvement of the Service. More details can be found in our Cookie Policy.

10. Children’s privacy

The Service is for individuals aged 18 and over. We do not knowingly gather personal information from minors. If you believe a minor has provided data, please tell us so we can take reasonable steps to delete it promptly.

11. Changes to this policy

We may revise this Privacy Policy from time to time. Significant changes will be posted online or communicated by email. If you continue using the Service once changes take effect, you are treated as accepting the updated policy.

12. How to contact us

For privacy enquiries or requests relating to your rights, contact our Data Protection Officer:

• Email: [email protected]
• Mailing address: Syntex AI Inc. 200 Park Avenue, New York, NY 10166, United States, United States
• EU representative: Syntex AI, 200 Park Avenue, New York, NY 10166, United States