Information collected
Account identity, organization membership, subscription and entitlement status, onboarding progress, MT5 account identifier, broker server, deployment identifier, customer-selected allocation, consent records, support requests, heartbeats, version data, security logs, and audit events may be processed.
Information not collected by the website
The website does not collect or store broker passwords or payment card details. Customers enter broker credentials directly inside the VPS/MT5 environment. Stripe-hosted pages process card information.
Account metrics
Where connected, balance or equity may be read only for capacity enforcement, risk controls, license display, and customer notifications. Fields designated sensitive are encrypted at rest and access is restricted by role and purpose.
Providers and retention
Identity, payment, email, hosting, database, VPS, broker, and monitoring providers process information under their own terms. Final retention periods, subprocessors, international-transfer language, privacy rights, and contact information require counsel and operational approval.
Security
Controls include least privilege, verified identity, optional MFA, encryption in transit and at rest, key rotation, rate limits, audit events, signed updates, idempotent webhooks, backups, and incident-response procedures. No security measure eliminates all risk.
Document status: Draft v0.1 | review date 2026-08-10 | approval status: pending counsel.