Privacy Policy

1. Introduction

AlfaTactix ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our no-code MetaTrader 5 strategy builder platform (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

3. How We Use Your Information

• Service Provision: To provide, maintain, and improve our Service
• Account Management: To create and manage your account, process subscriptions, and handle billing
• Security: To protect against fraud, unauthorized access, and security threats
• Communication: To send you service-related notifications, updates, and respond to your inquiries
• Service Improvement: To analyze platform performance and improve user experience (internal monitoring only)
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Business Operations: To operate our business, including data analysis, auditing, and internal operations

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on:

• Contract Performance: To fulfill our contract with you (providing the Service)
• Legitimate Interests: For security, fraud prevention, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

6. Data Security

• Encryption: Data in transit is encrypted using HTTPS/TLS
• Password Security: Passwords are hashed using bcrypt and never stored in plain text
• Token Security: Authentication tokens are signed and have expiration times
• Access Controls: Limited access to personal data on a need-to-know basis
• Session Management: Secure session management with automatic expiration
• Security Monitoring: Login attempt monitoring and account lockout mechanisms
• CSRF Protection: Cross-site request forgery protection using tokens

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

• Account Data: Retained while your account is active. You may request deletion at any time.
• Payment Records: Retained for 7 years as required by financial regulations
• Session Data: Active sessions retained for 7 days. Expired sessions are automatically deleted.
• Refresh Tokens: Retained for up to 30 days, then automatically deleted when expired
• Strategy Data: Retained until you delete your account or the specific strategy
• Backtest Progress Data: Retained for 3 days, then automatically deleted
• Local Storage Data: Stored in your browser until you clear your browser data or delete your account

You may request deletion of your data at any time (see Section 8).

8. Your Rights (GDPR & CCPA)

Depending on your location, you have the following rights regarding your personal information:

• Access You have the right to request access to the personal information we hold about you.
• Rectification You have the right to request correction of inaccurate or incomplete personal information.
• Erasure (Right to be Forgotten) You have the right to request deletion of your personal information, subject to legal obligations.
• Data Portability You have the right to receive your personal information in a structured, commonly used format.
• Objection You have the right to object to processing of your personal information for certain purposes.
• Restriction You have the right to request restriction of processing of your personal information.
• Withdraw Consent You have the right to withdraw your consent at any time where we rely on consent to process your information.
• Opt-Out (CCPA) If you are a California resident, you have the right to opt-out of the sale of personal information (we do not sell personal information).

9. Cookies and Local Storage

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately, and we will delete such information.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we collect
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt-out of the sale of personal information (we do not sell personal information)
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), as detailed in Section 8 above.

You also have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Data Controller Information

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: