1. Data Controller & Operational Privacy
1.1. The Platform is independently operated as a Software-as-a-Service (SaaS) initiative.
1.2. Operating exclusively as a digital and cloud-based service, all technical, administrative, and privacy inquiries are handled digitally:
• Official Privacy Channel: privacy@kpitradex.com
• Digital Helpdesk: In-app ticketing system at app.kpitradex.com
2. Information We Collect
KPITradeX strictly collects the minimum information required to authenticate users, synchronize trading logs, and generate quantitative performance analytics:
• Account Registration & Credentials: Name, email address, and encrypted credentials (or tokens issued via third-party OAuth providers such as Google OAuth).
• Read-Only Trading Records & Metrics: Ticket IDs, open/close timestamps, financial instruments traded, lot sizes, execution prices, commissions, swaps, and net profit/loss synchronized via our SyncAgent EA or user-imported files (CSV, HTML, XLSX).
• Optional Telemetry & Introspection Data: Personal journaling notes, behavioral/psychological bias tags, and chart screenshots voluntarily uploaded to operational records.
• Technical & Browsing Data: Anonymized IP addresses, browser specifications, diagnostic logs, and operational telemetry processed via our edge network.
3. Account Security: Non-Custodial Model & Read-Only Access
3.1. Zero Custody of Funds: KPITradeX is exclusively an analytics and statistical visualization tool. We do not hold user capital, are not a banking gateway, and cannot initiate deposits, withdrawals, or fund transfers under any circumstances.
3.2. We Never Request Trading or Withdrawal Passwords: Financial brokerages provide distinct access credentials. KPITradeX NEVER requests your master password (the key used to execute trades or withdraw funds from your broker).
3.3. How Does the Platform Connect? (Read-Only / Spectator Access):
• Via MetaTrader Plugin (SyncAgent EA): You utilize a unique digital connection key (token) that exclusively authorizes your terminal to transmit closed trade summaries to your web dashboard. It is a strictly outbound connection: the Platform cannot send trading orders to your terminal.
• Via Investor Password: If you choose this connection method, you provide only the read-only / spectator password supplied by your broker, which technically prevents executing orders or moving account balances.
4. Payments & Billing Compliance (Stripe Infrastructure / Lemon Squeezy)
4.1. Subscription billing, transactions, and recurring charges for KPITradeX are processed through our authorized Merchant of Record (MoR): Lemon Squeezy, LLC (a Stripe company).
4.2. KPITradeX does not store or have access to complete credit or debit card numbers, security codes (CVV), or the buyer's private banking credentials. Lemon Squeezy, backed by Stripe's payment and security infrastructure, acts as the official merchant of record and processes such data under its own international PCI-DSS Level 1 compliance standards and applicable statutory tax regulations.
5. Purpose of Data Processing
We process collected information strictly to:
• Configure your account, verify identity, and deliver access to platform modules.
• Calculate statistical dashboards, profit factors, recovery factors, drawdown telemetry, and consistency audits (tailored for personal and prop firm challenge accounts).
• Feed contextual operational parameters into our analytical models and AI Copilot assistant for generating historical trading diagnostics.
• Protect platform infrastructure, detect unauthorized access, and prevent technical abuse.
Non-Monetization Commitment: KPITradeX does not sell, rent, commercialize, or transfer individual trading telemetry to brokers, prop firms, hedge funds, or third-party advertising networks.
6. Data Storage, Infrastructure & Security
We enforce rigorous technical and organizational measures to safeguard your information:
• Encryption in Transit and at Rest: All communication between your browser or the SyncAgent EA and our servers is encrypted using HTTPS / TLS 1.3. Sensitive database records are encrypted at rest using AES-256 standards.
• Row Level Security (RLS): The database architecture enforces strict row-level isolation policies, ensuring no user can view, access, or modify records belonging to another account.
• Enterprise-Grade Cloud Infrastructure: Server instances and data repositories operate on certified enterprise-grade cloud facilities adhering to SOC 2 and ISO 27001 standards, backed by continuous edge DDoS protection.
7. Artificial Intelligence Processing (AI Copilot)
7.1. Inquiries submitted to the AI assistant are processed by forwarding solely relevant quantitative parameters from your trading logs (drawdown figures, ratios, anonymized trade history).
7.2. KPITradeX does not utilize private trading data or operational logs for the public training of third-party general artificial intelligence models without explicit consent.
8. Data Retention & Permanent Deletion
• We retain your operational logs for as long as your account remains active to provide unbroken historical journaling continuity.
• Should you choose to close or delete your account, your personal profile and trading history will be permanently expunged from our active databases within thirty (30) days, barring residual records strictly required for audit trails or statutory compliance.
9. User Privacy Rights (GDPR / Global Compliance)
Regardless of your geographic location, we recognize your data sovereignty and privacy rights:
• Access & Inspection: Request full visibility of data stored in association with your profile.
• Rectification: Update credentials, preferences, or profile identifiers directly via your user portal.
• Data Portability: Export your consolidated trading history in structured digital formats (CSV/PDF).
• Erasure / Right to be Forgotten: Request comprehensive, permanent deletion of your profile and telemetry.
To exercise any of these rights, use the in-app account settings or submit a formal request to: privacy@kpitradex.com.
10. Policy Amendments
We reserve the right to revise this Privacy Policy periodically to reflect technological upgrades, security enhancements, or legal requirements. Material amendments will be communicated via in-app notifications or email prior to taking effect.
11. Contact & Privacy Inquiries
For inquiries, feedback, or formal privacy requests concerning data management at KPITradeX:
• Official Privacy Email: privacy@kpitradex.com
• Digital Helpdesk: app.kpitradex.com