Privacy policy

1. Data we collect

1.1 Details you give us

When you register an account or use the Service, we may collect the following types of information:

• Identity information: your first name, surname and date of birth.
• Contact information: your email address, telephone number and home address.
• Financial information: Broker API credentials restricted to reading and submitting orders, together with your investment preferences and risk settings. We do not retain complete broker passwords or full payment-card numbers.
• Account profile: your username, strategy configuration and alert preferences.
• Correspondence: messages you send through support channels or email.

1.2 Data collected automatically

We automatically collect certain technical details when you access or use the Service:

• IP address, browser type and version, and operating system.
• Pages and tools accessed, time spent on the platform and clickstream activity.
• Device identifiers and, where relevant, mobile advertising identifiers.
• Cookie and tracking data (see our Cookie Policy).

1.3 Data obtained from third parties

We may obtain information from identity-check providers, fraud-prevention services and analytics partners. We may combine this with information we already hold to improve reliability and safeguard the Service.

2. How we use your information

We may use the information collected to:

• Open, administer and provide your account and the Service.
• Handle trading signals and automated orders through connected brokers.
• Tailor your experience and show relevant market information.
• Send service messages, including confirmations, trading notifications and security alerts.
• Provide marketing communications where you have agreed to receive them or where the law allows.
• Identify, investigate and prevent fraud or unlawful activity.
• Meet applicable legal and regulatory responsibilities.
• Build, test and enhance the Service with aggregated and anonymised information.

3. Lawful grounds for processing (EEA and UK users)

For people in the European Economic Area or the United Kingdom, we rely on the following lawful grounds when processing personal data:

• Contract performance: to deliver the Service requested when you create an account.
• Legitimate interests: to combat fraud, secure the platform and improve our product.
• Legal requirement: to satisfy financial-law and tax obligations.
• Consent: for marketing and optional cookies, which you can revoke at any time.

4. Sharing information

We do not sell personal data. We may disclose it to:

• Service providers: cloud hosting, email, analytics and support providers that are contractually required to protect your information.
• Linked brokers and exchanges: only the API instructions necessary to carry out the strategy you configured.
• Public bodies: where required by legislation or a court, or where disclosure is necessary to protect our legal rights.
• Business transactions: during a merger, acquisition or asset transfer, provided the recipient continues to comply with this policy.

5. Transfers of information abroad

Lucrant AI Inc. serves customers in markets around the world. Your information may be processed or moved beyond your country of residence, including to the United States and EU Member States. Where required, these transfers rely on Standard Contractual Clauses adopted by the European Commission.

6. How long we keep data

We keep personal information while your account remains open, or for the period needed to deliver the Service. Following account closure, some records may be retained for up to seven years to meet financial and regulatory requirements. Information that has been aggregated or anonymised may be kept without a time limit.

7. Rights relating to your personal information

Subject to your location and the law that applies, you may be entitled to:

• Request a copy of the personal information we hold about you.
• Ask us to amend information that is incorrect or missing.
• Request deletion of your personal information, sometimes referred to as the “right to be forgotten”.
• Object to certain uses of your information or ask us to limit that processing.
• Obtain your information in a structured format that a computer can read.
• Revoke consent at any time; this will not make earlier lawful processing invalid.

To make a request concerning your data rights, contact us at [email protected]. We generally respond within 30 days.

8. Keeping your information secure

Our security measures include TLS 1.3 for data in transit, AES-256 for stored data, multi-factor authentication, permissions based on user roles and yearly independent penetration tests. No system can guarantee total security. Use a strong password that you do not reuse and turn on two-factor authentication.

9. Cookies and related tools

Cookies and comparable technologies help us operate and improve the Service. Further information is available in our Cookie Policy.

10. Privacy for children

The Service may only be used by people aged 18 or over. We do not deliberately gather personal information from children. If you think a child has provided us with data, please contact us so that we can remove it promptly.

11. Updates to this policy

This Privacy Policy may be amended periodically. Significant changes will be published on the website or communicated by email. Continuing to use the Service once an amended policy takes effect indicates acceptance of the revised terms.

12. How to contact us

For privacy questions or requests connected with your data rights, please contact our Data Protection Officer:

• Email address: [email protected]
• Registered office: Lucrant AI Inc 200 Park Avenue, New York, NY 10166, United States, United States
• EU representative: Lucrant AI, 200 Park Avenue, New York, NY 10166, United States