Privacy Policy

1. Who we are

VAULTING TRADE LTD (company no. 17145413) is the data controller for personal data collected through Vaulted Copier at copier.tradersvault.app. We are a company registered in England and Wales.

2. Data we collect

We collect and process the following categories of personal data:

• Account data: email address, hashed password, and any display name you provide when you create an account.
• Payment data: name and payment method details are collected and processed by Stripe (our payment provider). We store only the order ID, plan, and payment status — not full card numbers.
• Usage data: log data including API requests, copy engine activity, connection events, errors, and audit entries.
• Technical data: IP address, browser type, and operating system collected automatically via standard server logs.
• Broker API credentials: API keys you provide to connect your broker accounts. These are encrypted at rest. We do not store plain-text credentials.

3. How we use your data

We use your personal data to:

• Provide and operate the Vaulted Copier service
• Process subscription payments and issue receipts
• Send transactional emails (order confirmation, payment receipts, account alerts)
• Maintain audit logs for security and fraud prevention
• Improve the service and debug issues
• Comply with legal and regulatory obligations

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Legal basis (UK GDPR)

Our legal basis for processing personal data under UK GDPR:

• Contract: processing your account and payment data to provide the subscription service you have purchased.
• Legitimate interests: security logging, fraud prevention, and service improvement.
• Legal obligation: retaining financial records as required by UK law.

5. Data sharing

We share personal data with the following third parties only as necessary to operate the service:

• Supabase: cloud database and authentication infrastructure, hosted in the EU.
• Stripe: payment processing. Subject to Stripe’s privacy policy.
• Vercel: hosting infrastructure.

We do not share data with advertising networks or data brokers.

6. Data retention

We retain your account data for the duration of your subscription plus 30 days after account deletion. Payment records are retained for 7 years to comply with UK financial record-keeping requirements.

Audit logs are retained for 12 months. Broker API credentials are deleted immediately upon account deletion or credential removal.

7. Your rights (UK GDPR)

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to processing based on legitimate interests
• Request a portable copy of your data
• Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk

To exercise any of these rights, email support@tradersvault.app. We will respond within 30 days.

8. Cookies

We use strictly necessary cookies to maintain your session when you are logged in. We do not use tracking cookies, advertising cookies, or third-party analytics scripts beyond what is necessary to operate the service.

9. Security

We implement industry-standard security measures including encryption at rest, TLS in transit, hashed credentials, and role-based access controls. No system is entirely secure, and we cannot guarantee absolute security of your data.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or by a notice on the service. Continued use after notice constitutes acceptance.

11. Contact

VAULTING TRADE LTD, England and Wales (company no. 17145413).
Email: support@tradersvault.app