How we handle privacy and personal data

1. Information we collect

1.1 Information you submit

When you create an account or use the Service, we may ask for or receive the following categories of information:

• Identification information: your given name, family name and birth date.
• Contact details: your email address, phone number and residential address.
• Financial details: broker API credentials with read-only or order-placement access, investment preferences and risk parameters. We do not store complete broker passwords or entire card numbers.
• Profile information: your username, selected strategies and notification settings.
• Communications: messages you send through support channels or email.

1.2 Information collected automatically

Certain technical information is generated automatically as you use the Service:

• IP address, browser type and version, and operating system.
• Pages viewed, tools opened, time spent on the website and clickstream activity.
• Device identifiers and, where applicable, mobile advertising identifiers.
• Cookie and tracking information (refer to our Cookie Policy).

1.3 Information obtained from third parties

Identity-verification providers, fraud-prevention services and analytics partners may provide information. We may compare those records with information already held to strengthen security and reliability.

2. How we use information

Collected information may be used to:

• Create, manage and support your account and provide the Service.
• Send trading signals or execute automated orders through connected brokers.
• Personalize your experience and present relevant market information.
• Deliver service communications, including confirmations, trading alerts and security notifications.
• Provide marketing communications where you consent or applicable law allows.
• Detect, investigate and prevent fraud or other prohibited activity.
• Comply with applicable legal and regulatory obligations.
• Create, evaluate and improve Service features using aggregated, anonymized information.

3. Legal bases for EEA and UK users

For individuals in the European Economic Area or the United Kingdom, processing relies on these legal bases:

• Contract necessity: to provide the Service you request when registering.
• Legitimate interests: such as securing the platform, identifying fraud and developing the product.
• Legal obligation: including duties arising under financial and tax legislation.
• Consent: for promotional communications and optional cookies, which you can withdraw at any time.

4. When information is shared

We do not sell personal information. We may share it with:

• Service providers: cloud, email, analytics and support vendors contractually required to safeguard personal information.
• Connected brokers and exchanges: only the API instructions necessary to implement the strategy you chose.
• Authorities and lawful recipients: when disclosure is required by law or court order, or needed to protect our legal rights.
• Business transactions: in a merger, acquisition or asset sale, provided the recipient continues to follow this policy.

5. International data transfers

Finantrix Forge operates in multiple jurisdictions. Your personal data may be processed or stored outside Canada, including in the United States and the European Union. Where applicable, suitable contractual protections are used for international transfers.

6. Data retention

We retain personal information while your account is active or as needed to provide the Service. After closure, certain records may remain for up to seven years to satisfy financial regulatory obligations. Aggregated, anonymized analytics may be retained indefinitely.

7. Your privacy rights

Depending on where you live, you may be entitled to:

• Request a copy of the personal information we hold about you.
• Ask us to correct incomplete or incorrect information.
• Request deletion, subject to legally required exceptions.
• Object to or restrict certain processing.
• Receive your information in a structured, machine-readable form.
• Withdraw consent at any time, without affecting processing already carried out.

To submit a privacy-rights request, email [email protected]. We generally respond within 30 days.

8. Information security

We apply widely used safeguards, including TLS 1.3 for data in transit, AES-256 encryption for stored data, multi-factor authentication, role-based access and annual independent penetration testing. No system removes every risk. Choose a strong, unique password and enable two-factor authentication.

9. Cookies and related technologies

Cookies and similar technologies help us operate and improve the Service. More information is available in our Cookie Policy.

10. Children’s privacy

The Service is for individuals aged 18 and over. We do not knowingly collect personal information from minors. If you believe a minor has provided data, notify us so we can remove it as soon as reasonably possible.

11. Policy revisions

This Privacy Policy may change periodically. Material updates will be posted on our website or sent by email. Using the Service after the effective date means you accept the updated policy.

12. Contacting us

For privacy questions or requests concerning your rights, contact our Data Protection Officer:

• Email: [email protected]
• Mailing address: Finantrix Forge Corporation, 100 King Street West, Toronto, ON M5X 1A9, Canada, United States
• EU representative: Finantrix Forge, 100 King Street West, Toronto, ON M5X 1A9, Canada