Privacy and information policy

1. Information we collect

1.1 Information you provide

When you create an account or access the Service, we may ask for or receive the following categories of information:

• Identity details: your given name, family name and birth date.
• Contact details: your email address, phone number and residential address.
• Financial details: broker API credentials with read-only or execution access, investment selections and risk parameters. We do not store complete broker passwords or payment-card numbers.
• Profile information: username, strategy preferences and notification settings.
• Communications: messages you send through support channels or by email.

1.2 Information collected automatically

Your use of the Service also generates certain technical information automatically:

• IP address, browser type and version, and operating system.
• Pages viewed, features used, time spent and clickstream activity.
• Device identifiers and mobile advertising identifiers where applicable.
• Cookie and tracking details (see our Cookie Policy).

1.3 Information received from third parties

We may receive information from identity-verification providers, fraud-screening services and analytics partners. We can combine these records with information we already hold to strengthen reliability and security.

2. How we use information

Collected information may be used to:

• Create, manage and assist with your account and provide the Service.
• Send and execute trading signals or automated orders through connected brokers.
• Personalize your experience and present relevant market information.
• Provide service communications, including confirmations, trade updates and security notices.
• Deliver marketing communications where you consent or the law allows.
• Detect, investigate and prevent fraud or other prohibited activity.
• Satisfy legal and regulatory obligations.
• Develop, evaluate and improve Service features with aggregated, anonymized data.

3. Legal bases for EEA and UK users

For individuals located in the European Economic Area or United Kingdom, personal data is processed under the following legal bases:

• Performance of a contract: to provide the Service requested when you register.
• Legitimate interests: such as maintaining security, preventing fraud and improving the product.
• Legal obligation: including duties under financial regulations and tax legislation.
• Consent: for marketing communications and optional cookies, which you can withdraw at any time.

4. When information is disclosed

We do not sell personal information. It may be provided to:

• Service providers: cloud hosting, email, analytics and support companies subject to contractual privacy requirements.
• Connected brokers and exchanges: only the API instructions required to implement the strategy you selected.
• Public authorities or legal parties: when disclosure is required by law, court order or to protect our rights.
• Business transactions: in a merger, acquisition or asset sale, provided the acquiring party continues to follow this policy.

5. International data transfers

Turbvault operates across multiple markets. Your personal data may be processed or stored outside Canada, including in the United States and the European Union. Where required, suitable contractual protections are used for cross-border transfers.

6. Data retention

We retain personal information while your account is active or as needed to deliver the Service. After closure, certain records may be kept for up to seven years to satisfy financial regulatory requirements. Aggregated, anonymized analytics may be retained indefinitely.

7. Your privacy rights

Depending on where you live, your rights may include the ability to:

• Request a copy of the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Request deletion of your information, subject to legal exceptions.
• Object to or restrict certain processing activities.
• Receive your information in a structured, machine-readable form.
• Withdraw consent at any time, without affecting processing already carried out.

To submit a rights request, email us at . We generally respond within 30 days.

8. Information security

We apply widely accepted safeguards, including TLS 1.3 for information in transit, AES-256 encryption for stored information, multi-factor authentication, role-based access controls and annual independent penetration tests. No system is entirely risk-free. Choose a strong, unique password and enable two-factor authentication.

9. Cookies and related technologies

Cookies and similar technologies support the operation and improvement of the Service. More details appear in our Cookie Policy.

10. Children’s privacy

The Service is for individuals aged 18 and over. We do not knowingly collect personal information from minors. If you believe a minor has provided data, please notify us so we can remove it as soon as reasonably possible.

11. Policy changes

This Privacy Policy may be amended periodically. Material changes will be announced on our website or sent by email. Using the Service after the effective date means you accept the revised policy.

12. Contact details

For privacy questions or requests concerning your rights, contact our Data Protection Officer:

• Email:
• Mailing address: Turbvault Corporation, 100 King Street West, Toronto, ON M5X 1A9, Canada, United States
• EU representative: Turbvault, 100 King Street West, Toronto, ON M5X 1A9, Canada