Privacy Policy

1. Who We Are

TradeDonor (“we”, “our”, “us”) operates the TradeDonor Cloud dashboard and Expert Advisor (EA) software. We are committed to protecting your personal data and respecting your privacy.

For questions, contact us at support@tradedonor.com.

2. Data We Collect

• Account data: name, email address, hashed password.
• Trading data: EA heartbeats (balance, equity, P&L, trade logs) sent from your MetaTrader 5 or NinjaTrader terminal.
• License data: EA license keys, machine activations, expiry dates.
• Usage data: login timestamps, dashboard activity (no behavioral tracking or ad pixels).
• Technical data: IP address (used for rate limiting only, not stored long-term).

3. How We Use Your Data

• Provide, operate, and improve the TradeDonor platform.
• Authenticate your account and protect against unauthorized access.
• Send transactional emails (email verification, password reset, license alerts).
• Display your trading data on your personal dashboard.
• Enforce license terms and prevent abuse.

We do not sell your data, share it with advertisers, or use it for automated profiling.

4. Data Storage & Security

Your data is stored in Supabase (PostgreSQL, hosted on AWS). All data is encrypted at rest and in transit (TLS). Passwords are hashed using bcrypt with cost factor 12 — we cannot recover your password.

We implement rate limiting on authentication endpoints to protect against brute-force attacks.

5. Third-Party Services

Each provider has its own privacy policy and data processing agreement.

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access: Request a copy of all data we hold about you.
• Rectification: Correct inaccurate data via your account settings.
• Erasure: Request deletion of your account and all associated data.
• Portability: Request an export of your trading data in JSON format.
• Restriction: Request we stop processing your data.

To exercise these rights, email support@tradedonor.com. We respond within 30 days.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days. Trade logs and heartbeat data are deleted with your account.

8. Cookies

We use a single HTTP-only session cookie (td_session) to authenticate your session. No tracking cookies, no third-party cookies, no analytics cookies.

9. Changes to This Policy

We may update this policy. Material changes will be communicated by email to your registered address. Continued use of TradeDonor after changes constitutes acceptance.