Privacy policy

1. Information we gather

1.1 Details you give us

When you register or use the Service, we may obtain the following information:

• Identity information: your first and last name and date of birth.
• Contact information: your email address, telephone number and home address.
• Financial information: Broker API keys restricted to reading and execution, together with your investment preferences and risk settings. We do not retain complete broker login details or card numbers.
• Account profile information: your username, strategy preferences and notification choices.
• Correspondence: messages submitted through support channels or sent by email.

1.2 Information gathered automatically

Using the Service causes certain technical details to be collected automatically:

• IP address, browser and browser version, and operating system.
• Pages viewed, tools used, time on site and clickstream information.
• Device identifiers and mobile advertising identifiers where relevant.
• Information from cookies and tracking tools (see our Cookie Policy).

1.3 Information supplied by third parties

We may obtain information from identity-check providers, fraud prevention services and analytics partners. This may be combined with information already held to support accuracy and security.

2. How we use information

The information collected may be used to:

• Set up and administer your account and deliver the Service.
• Handle trading signals and automated orders through connected brokers.
• Tailor your experience and show relevant market information.
• Send service messages, including confirmations, trading updates and security notices.
• Send promotional messages where you have agreed to receive them or legislation allows.
• Identify, examine and stop fraudulent or unlawful behaviour.
• Meet legal and regulatory responsibilities.
• Improve, test and build Service features using aggregated, anonymised information.

3. Lawful grounds for processing (EEA and UK users)

For people in the European Economic Area or the United Kingdom, personal data is processed on these legal grounds:

• Contract necessity: to deliver the Service requested when you sign up.
• Legitimate interests: fraud prevention, security and developing the product.
• Legal requirement: meeting financial regulation and tax obligations.
• Consent: for marketing and optional cookies, which you may revoke at any point.

4. When information is shared

We do not sell personal information. It may be disclosed to:

• Service suppliers: cloud hosting, email, analytics and support providers required by contract to safeguard your information.
• Connected brokers and exchanges: only the API instructions needed to carry out your configured strategy.
• Public authorities: where law, a court order or protection of our rights requires it.
• Business transfers: during a merger, acquisition or asset transfer, provided the acquiring party continues to respect this policy.

5. Transfers of data internationally

Syntex AI provides services internationally. Information may be moved to and processed in countries outside your place of residence, including the United States and European Union member states. Where applicable, we rely on European Commission-approved Standard Contractual Clauses to protect international transfers.

6. How long we keep data

We keep personal information while your account remains open or for as long as needed to provide the Service. Once an account closes, some information may be retained for up to seven years to meet financial regulatory duties. Aggregated, anonymised analytics may be kept without a fixed end date.

7. Your rights

Subject to your location and applicable law, you may be able to:

• Obtain a copy of the personal information we hold about you.
• Ask us to amend information that is wrong or incomplete.
• Ask for your information to be erased (the “right to be forgotten”).
• Object to, or ask us to limit, particular processing.
• Request data portability in a structured, machine-readable format.
• Withdraw consent at any time, without affecting earlier processing.

To make a rights request, contact us at [email protected]. We aim to reply within 30 days.

8. Keeping information secure

Our safeguards include TLS 1.3 for data in transit, AES-256 for stored data, multi-factor authentication, role-based permissions and yearly independent penetration testing. No system can be guaranteed completely secure. Use a strong, unique password and turn on two-factor authentication.

9. Cookies

Cookies and comparable technologies help us operate and enhance the Service. Further information is available in our Cookie Policy.

10. Privacy of children

The Service is intended for people aged 18 or over. We do not knowingly gather personal information from children. If you think a child has supplied us with information, please tell us so that we can remove it promptly.

11. Updates to this policy

This Privacy Policy may be amended periodically. Significant changes will be communicated through a website notice or email. Continuing to use the Service after an update takes effect means you accept the amended policy.

12. How to contact us

For privacy questions or to exercise your rights, contact our Data Protection Officer:

• Email address: [email protected]
• Postal address: Syntex AI Inc., 200 Park Avenue, New York, NY 10166, United States, United States
• Representative in the EU: Syntex AI, 200 Park Avenue, New York, NY 10166, United States