Privacy Policy | SmartEA

1. Information We Collect

Personal Information

Name and email address (during registration)
Google account information (if using Google OAuth)
MT5 broker account credentials (encrypted)
Trading preferences and risk settings

Automatically Collected Information

IP address and browser type
Device information and operating system
Usage data and interaction patterns
Cookies and similar tracking technologies

2. How We Use Your Information

To provide and maintain the copy trading service
To execute trades on your MT5 account as directed
To authenticate your identity and secure your account
To send important notifications about your account and trades
To improve our Platform and develop new features
To comply with legal obligations

3. Data Security

We implement industry-standard security measures to protect your data:

MT5 credentials are encrypted using AES-256-GCM encryption
Passwords are hashed using bcrypt with salt rounds
All data transmission is encrypted via HTTPS/TLS
JWT tokens with short expiration for session management
HttpOnly cookies for refresh tokens to prevent XSS attacks
Regular security audits and vulnerability assessments

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:

With your MT5 broker to execute trades (credentials only)
With service providers who assist in operating the Platform
When required by law or to respond to legal processes
To protect the rights and safety of SmartEA and its users

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion, your personal data will be removed within 30 days, except where retention is required by law. MT5 credentials are immediately deleted upon disconnecting your trading account.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data
Portability: Request transfer of your data in a machine-readable format
Objection: Object to processing of your data in certain circumstances

7. Cookies

We use essential cookies for authentication and session management. These cookies are necessary for the Platform to function and cannot be disabled. We do not use advertising or tracking cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a notice on the Platform. Your continued use after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related inquiries, please contact us at privacy@smartea.com.