Privacy policy

1. Information we collect

1.1 Information you provide

When you create an account or use the Service, we may collect the following categories of information:

• Identity details: your given name, family name and date of birth.
• Contact details: your email, telephone number and residential address.
• Financial details: Broker API credentials limited to reading and submitting orders, along with your investment preferences and risk parameters. We do not store full broker passwords or complete card numbers.
• Profile information: your username, strategy settings and alert choices.
• Communications: messages you submit through support channels or by email.

1.2 Information gathered automatically

When you use the Service, certain technical information is collected automatically:

• IP address, browser type and version, and operating system.
• Pages visited, tools used, time spent on the platform and clickstream data.
• Device identifiers and, where applicable, mobile advertising identifiers.
• Cookie and tracking information (see our Cookie Policy).

1.3 Information received from others

We may obtain information from identity verification providers, fraud-prevention services and analytics partners. This may be combined with information already held to improve reliability and protect the Service.

2. How information is used

We may use collected information to:

• Create, manage and provide your account and the Service.
• Process trading signals and automated orders through linked brokers.
• Personalise your experience and present relevant market information.
• Send service communications, including confirmations, trading updates and security alerts.
• Deliver marketing communications where you have opted in or applicable law permits.
• Detect, investigate and prevent fraud or unlawful conduct.
• Comply with legal and regulatory duties.
• Develop, test and improve the Service using aggregated and anonymised data.

3. Legal bases for processing (EEA and UK users)

For individuals in the European Economic Area or United Kingdom, we process personal data on the following legal bases:

• Performance of a contract: to provide the Service you request when opening an account.
• Legitimate interests: to prevent fraud, protect the platform and improve our product.
• Legal obligation: to meet financial-law and tax requirements.
• Consent: for marketing and optional cookies, which you may revoke at any time.

4. When we disclose information

We do not sell personal information. We may share it with:

• Service providers: cloud hosting, email, analytics and support suppliers contractually required to protect your information.
• Linked brokers and exchanges: only the API instructions required to execute the strategy you have configured.
• Public bodies: when legislation or a court requires it, or when disclosure is needed to defend our legal interests.
• Corporate transactions: during a merger, purchase or transfer of assets, on the condition that the receiving party continues to follow this policy.

5. International data transfers

Doreva Kelnor Inc. operates across international markets. Your information may be handled or transferred outside your country of residence, including the United States and EU Member States. Where applicable, international transfers are based on Standard Contractual Clauses adopted by the European Commission.

6. Data retention

We retain personal data while your account is active, or for as long as necessary to provide the Service. After closure, certain records may remain for up to seven years to satisfy financial and regulatory obligations. Aggregated and anonymised information may be kept indefinitely.

7. Your data protection rights

Depending on where you live and which laws apply, you may have the right to:

• Ask for a copy of the personal information we hold about you.
• Have inaccurate or incomplete details corrected.
• Ask us to erase your personal information, sometimes known as the “right to be forgotten”.
• Challenge certain processing activities or request that we restrict them.
• Receive your data in a structured format that a machine can read.
• Withdraw consent whenever you choose, without changing the lawfulness of processing performed before withdrawal.

To make a data rights request, contact us at [email protected]. We normally respond within 30 days.

8. Protecting your information

Our protections include TLS 1.3 for information in transit, AES-256 for stored information, multi-factor authentication, access permissions based on roles and annual independent penetration tests. No technology is completely secure. Choose a strong, unique password and enable two-factor authentication.

9. Cookies and similar tools

We use cookies and related technologies to run and enhance the Service. More details can be found in our Cookie Policy.

10. Children’s privacy

The Service is for individuals aged 18 and above. We do not knowingly collect children’s personal information. If you believe a child has sent us data, please notify us so it can be removed without undue delay.

11. Changes to this policy

We may revise this Privacy Policy from time to time. Material updates will appear on the website or be sent by email. If you continue using the Service after the revised policy begins, you will be treated as having accepted the changes.

12. Contact details

For privacy enquiries or requests about your rights, please contact our Data Protection Officer:

• Email: [email protected]
• Registered address: Doreva Kelnor Inc 200 Park Avenue, New York, NY 10166, United States, United States
• EU representative: Doreva Kelnor, 200 Park Avenue, New York, NY 10166, United States