ULVYRAESENPrivacy Policy
Data controller: ULVYRA, España. Contact: [email protected].
What we process
Account data (name, email, hashed password), subscription data (plan and status; card details are handled by Stripe and never seen by us), credentials or tokens for platforms you connect (encrypted with AES-256), trading data (accounts, balances, positions, trades, notes) and technical logs (sign-ins and security events).
Why and on what basis
To provide the service you signed up for (contract); to bill you and meet tax duties (legal obligation); for security, fraud prevention and service improvement (legitimate interest); to send service notices such as account locks or failed payments (contract). We never sell your data or use it for advertising.
Who we share it with
Only processors we need: hosting and database, Stripe (payments), our email provider, Google Analytics (only if you accept analytics cookies), TradingView (news and chart widgets), Tidio (support chat: it receives what you write in the chat and, if you are signed in, your name and email), Anthropic (the AI coach receives statistics and trades when you use it, without your email) and the platforms you connect (TopstepX/ProjectX, Tradovate, MetaApi, TradeLocker, cTrader). Where they are outside the EEA/UK, standard contractual clauses or other appropriate safeguards apply.
How long
For as long as you have an account. When you delete it we erase your data immediately, except what the law requires us to keep (such as invoices) for the statutory period. Backups roll over within 30 days.
Your rights
You can access, correct, port (Settings → Download my data), erase (Settings → Delete account), object to and restrict processing by emailing us. You may also complain to your data protection authority (in Spain, the AEPD; in the UK, the ICO).
Security
Encrypted connections (HTTPS), bcrypt-hashed passwords, encrypted platform credentials, revocable sessions and a log of every support-team action.