Privacy

We store only what the desk needs to run your book. Rows are scoped to your signed-in user id. We do not sell data.

Account

Email, display name, password hash (or Google/X identity), email-verification state, and authenticator secret if you enable 2FA. Preview email codes are shown in the desk because outbound mail is not connected here.

KYC file

Full name, country, date of birth, id type, and last four of the document number. Live OANDA routing requires a verified file. This is a desk control, not a regulated onboarding process.

Broker credentials

OANDA personal access tokens and MT5 login/server/password are stored so the engine can place orders on your behalf. Tokens are masked after save (last four only in the UI). Disconnect deletes the row. Do not paste a token you cannot rotate.

Trading and billing records

Positions, order log, pipeline events, risk settings, notifications, tickets, audit actions, and preview payment receipts (plan, amount, last4 4242, billing reference). Preview checkout does not capture or store a full card number.

Your controls

You can disconnect venues, disarm the bot, and close tickets. To delete an account in a published deployment, contact support from the desk. Do not send identity documents over public channels.