Privacy Policy

This Privacy Policy explains how U-TRADEX ("we", "us") collects, uses, and protects your personal data when you use our website and services. We act as the data controller for this processing. Questions? Email [email protected].

1. Data we collect

• Account data — your name, email, country, and Telegram username, provided when you register.
• Authentication data — a hashed password and session cookies that keep you signed in.
• Broker-connection data — if you choose to connect a cTrader account, the encrypted access and refresh tokens issued by cTrader, your trading-account identifier, broker name, and account currency. We never receive or store your cTrader password.
• Trading data — the signals copied to your account and the resulting orders, positions, and performance records, so we can show your dashboard and manage open trades.
• Payment data — billing metadata and subscription status. Card details are handled directly by our payment processor (Stripe); we never see or store your full card number.
• Technical data — IP address, browser type, language, and basic usage logs, used for security and to operate the service.

2. Why we process it, and our lawful bases

• To provide the service (deliver signals, run your dashboard, execute copied trades) — performance of a contract (GDPR Art. 6(1)(b)).
• To connect your broker and place, modify, or close orders on your behalf — your explicit consent and instructions (Art. 6(1)(a)); see section 3.
• To take payment and prevent fraud — contract and legitimate interests (Art. 6(1)(b), 6(1)(f)).
• To meet legal and accounting obligations — legal obligation (Art. 6(1)(c)).
• Analytics cookies — only with your consent (Art. 6(1)(a)); see our Cookie Policy.

3. Connecting cTrader and executing orders

Copy-trading is optional and only happens if you connect a broker account. When you connect, you are taken to cTrader's own secure login (OAuth 2.0). You authenticate directly with cTrader — we never see your cTrader credentials. cTrader then returns an access token that authorizes our system to act only on the specific trading account you selected.

By connecting and granting this authorization, you instruct U-TRADEX to place, modify, and close orders on that account on your behalf, mirroring our signals according to the risk settings you choose. Specifically:

• We act only on the trading account you explicitly authorized. The master account and other users' accounts are fully isolated — they cannot see or affect yours, and yours cannot see or affect theirs.
• We never withdraw, deposit, or transfer your funds. Your capital stays in your own broker account at all times.
• The access token is stored encrypted and is used only to execute and manage the trades you authorized.
• You can pause auto-copy, disconnect your broker, or revoke our access at any time — from your dashboard, or directly within cTrader. Revoking stops all future order execution; it does not by itself close positions already open, which remain under your control.
• We record the date, time, and IP address of your trading authorization as proof of consent.

4. Who we share data with

We do not sell your data. We share the minimum necessary with processors who help us run the service: Stripe (payments), Telegram (signal delivery), cTrader / Spotware (order execution on your authorized account), Cloudflare (security and delivery), and our hosting provider. Each processes data under its own terms and applicable data-protection agreements.

5. International transfers

Some processors may store or process data outside your country, including outside the EEA. Where that happens, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.

6. How long we keep it

We keep your account and trading records while your account is active and as required for legal, tax, and accounting purposes. When you delete your account, we remove your personal data, broker tokens, and trading records, retaining only what the law requires us to keep.

7. How we protect it

Broker tokens and other sensitive fields are encrypted at rest, traffic is served over TLS, and access is restricted. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

8. Your rights under the GDPR

If you are in the EEA or UK, you have the right to: access your data; correct it; have it erased; restrict or object to processing; data portability; and to withdraw consent at any time (including trading authorization) without affecting processing already carried out. To exercise any of these, email [email protected]. You also have the right to lodge a complaint with your local data-protection supervisory authority.

9. Cookies

We use essential cookies to run the service and, only with your consent, analytics cookies to improve it. See our Cookie Policy for details.

10. Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected here with an updated date.