Privacy notice

This notice explains what personal data TheTradingRobot.com collects when you use the website, the builder and your account, and when you get a robot. It says why we use the data, who helps us, how long we keep it and what your rights are.

The short version

We keep what we need to run your account, build your robots and keep the records the law asks for.
Your MetaTrader 5 account numbers are kept in our database. Inside a robot file they appear only in a scrambled form, plus the last four digits.
We never ask for your trading password or your investor password.
The only cookie we set keeps you signed in. We use no analytics and no advertising trackers.
We do not sell your data.

Who is responsible for your data

[not set yet: the seller's legal name], trading as TheTradingRobot.com, is responsible for your data (the controller). Address: [not set yet: the seller's address]. For any question about this notice, or to use your rights, email support@thetradingrobot.com.

What we collect, why, and our legal reason

Your account

Your email address, your name if you give it, your password, the date you accepted our terms, and when you last signed in. We store your password only in a form that cannot be turned back into the password. We use this to give you an account and to keep it secure. Our legal reason is our contract with you (Article 6(1)(b) of the GDPR and the UK GDPR).

For each browser you sign in with, we keep the type of browser and a scrambled form of the IP address it used. An IP address is a number that identifies an internet connection. We use this to protect your account, for example to lock it for a while after several wrong passwords. Our legal reason is our legitimate interest in keeping accounts secure (Article 6(1)(f)).

Your strategies and robots

The robots you build in the builder, each version you save, and the results of our checks on them. We use them to save your work, build your robots and rebuild them later. Our legal reason is our contract with you.

Our staff open a strategy only for a support request you started. Each time is logged with the reason, and you can see that log.

Your MetaTrader 5 account numbers

The account numbers you name when you get a robot are personal data. We keep them in our database with your purchase, use them to build your robot, and show them in your account. Inside the robot file they appear only as scrambled values (salted hashes) plus the last four digits of each number, which the robot shows in its messages. Account numbers are short, so with enough effort a scrambled value could be worked back to the number. That is why we do not treat a robot file as anonymous.

We never ask for your trading password or your investor password.

Purchases and payments

What you bought, the account numbers you named, the price, the VAT and the country you told us you live in. Your agreement at checkout: the wording you agreed to, the time, your IP address, the type of browser and the country of that IP address. The version of the terms you accepted, your order confirmation, your receipt and any refund.

Stripe, which processes card payments, gives us the payment's reference, the card's country and your billing country. We never see your full card number. During the free launch we keep the same records, with a price of zero.

We use this to sell you the robot, to prove what you agreed to, to keep the tax records the law requires, to handle refunds and payment disputes, and to prevent fraud. Our legal reasons are our contract with you, our legal obligations to keep tax and sales records (Article 6(1)(c)), and our legitimate interest in preventing fraud and defending payment disputes (Article 6(1)(f)).

Downloads

When you download a robot, a compile log or a test copy, we record the time, your IP address and the type of browser. We use this to show your download history, to prevent fraud and to defend payment disputes. Our legal reason is our legitimate interests in those things.

Emails

We keep a copy of each email we send you for 30 days, so we can help if one goes missing. Our email provider tells us whether each email was delivered, bounced or marked as spam. If an email to you bounces or you mark one as spam, we keep a scrambled form of your address so we stop sending to it. Our legal reasons are our contract with you, our legal obligation to confirm your order in writing, and our legitimate interest in delivering email reliably.

Messages you send us

Emails you send us arrive in our business mailbox. We use them to answer you. Our legal reason is our legitimate interest in answering you, or our contract with you when the message is about your robot.

The waitlist

If you joined our waitlist, we keep your email address, the date you joined and, if you joined on this website, a scrambled form of your IP address. We use your address for one thing: to tell you when TheTradingRobot opens. Our legal reason is your consent (Article 6(1)(a)), which you can withdraw at any time. Withdrawing it does not affect what we did before.

Strategy Tester reports

If you open a Strategy Tester report in the builder to see our checks on it, your browser reads the report. The report is not sent to us.

Website records

Our hosting company records requests to the website, such as the IP address, the type of browser and the page asked for. These records are needed to deliver the pages and protect the site from attacks. To slow down repeated sign-in attempts, we keep a scrambled form of the IP address for a short time. Our legal reason is our legitimate interest in running a secure website.

Who helps us

Netlify, Inc. (United States) hosts the website and runs our servers. It stores robot files and compile logs in Frankfurt, Germany.
MongoDB, Inc. (United States) runs our database, MongoDB Atlas, in Frankfurt, Germany.
Resend sends our emails from its EU region.
Stripe processes card payments. For some purposes, such as preventing fraud and meeting the rules for payment companies, Stripe decides how it uses your data itself, under its own privacy notice.
Microsoft (Microsoft 365) hosts our business mailbox.

Each of them, except Stripe for its own purposes, acts only on our instructions under a data processing agreement with us.

Sending your data outside the UK and the EU

Netlify, MongoDB, Resend, Stripe and Microsoft are US companies or have US group companies that may handle data, for example to give support. Where a company takes part in the EU-U.S. Data Privacy Framework and its UK Extension, transfers to it rely on that framework. Otherwise they rely on the EU Standard Contractual Clauses, with the UK's international data transfer addendum for UK data, as that company's data processing agreement says.

How long we keep it

Your account, strategies and robots: until you delete your account. We then delete them within 30 days, except the records listed below. A purchase record keeps only the robot's name and the short description shown when you bought it.
Purchase, payment and tax records, including receipts, refunds, the evidence of your country for VAT, your agreement at checkout and the terms you accepted: 10 years from the end of the year of the sale, because tax law requires it.
IP addresses and browser types recorded at checkout, at your agreement and at each download: 18 months. After that we keep only a scrambled form.
Evidence for a payment dispute: until the dispute is closed and the time for reopening it has passed, even if you delete your account in the meantime, because we may need it to defend a legal claim.
Robot files and compile logs: deleted straight away if a purchase is refunded or you delete your account. A file replaced by a rebuild, and a test copy, are deleted after 30 days.
Copies of emails we sent: 30 days.
Sign-in records for a browser: 30 days after it was last used.
The waitlist: until we have sent the opening email, then deleted within 30 days.
Logs of what our staff did with your data, including each time a strategy was opened: as long as your account exists, then deleted within 30 days, unless they are part of a record we must keep for longer.

Your rights

You can ask us at any time to:

show you the data we hold about you, and give you a copy;
correct it if it is wrong;
delete it;
stop using it, or limit how we use it;
give you your data in a form you can take to another service.

You can also download a copy of your strategies yourself at any time, and withdraw your consent to the waitlist email. To use any of these rights, email support@thetradingrobot.com. We will reply within one month. If the law requires us to keep a record, such as a tax record, we tell you which one and why.

If you are unhappy with how we handle your data, you can complain to the data protection authority where you live or work. In the UK this is the Information Commissioner's Office, and in the EU each country has its own authority.

Cookies and tracking

When you sign in, we set one cookie that keeps you signed in. The account cannot work without it, so we do not ask for your consent to it. We set no analytics or advertising cookies and load no trackers.

If you pause the moving background on our home page, your browser remembers that choice in its own storage on your device. It is never sent to us.

Stripe's checkout page, which Stripe runs, uses its own cookies to prevent fraud. Stripe's cookie notice explains them.

Automated decisions

We do not make decisions about you by automated means that have legal effects or similarly significant effects. Our checkout refuses a purchase automatically when the country you give is not on our sales list. Stripe uses automated checks to spot fraudulent payments, and if Stripe warns us that a payment may be fraudulent, we may refund it.

Age

You must be 18 or over to have an account. We do not knowingly collect data from anyone younger.

Changes to this notice

If we change this notice, we publish the new version here with its date. If a change affects how we use your data, we email you before it applies.

A draft, pending review by counsel