Privacy Policy

Last updated: February 9, 2026

1. Information We Collect

Personal Information

  • Name and email address (during registration)
  • Google account information (if using Google OAuth)
  • MT5 broker account credentials (encrypted)
  • Trading preferences and risk settings

Automatically Collected Information

  • IP address and browser type
  • Device information and operating system
  • Usage data and interaction patterns
  • Cookies and similar tracking technologies

2. How We Use Your Information

  • To provide and maintain the copy trading service
  • To execute trades on your MT5 account as directed
  • To authenticate your identity and secure your account
  • To send important notifications about your account and trades
  • To improve our Platform and develop new features
  • To comply with legal obligations

3. Data Security

We implement industry-standard security measures to protect your data:

  • MT5 credentials are encrypted using AES-256-GCM encryption
  • Passwords are hashed using bcrypt with salt rounds
  • All data transmission is encrypted via HTTPS/TLS
  • JWT tokens with short expiration for session management
  • HttpOnly cookies for refresh tokens to prevent XSS attacks
  • Regular security audits and vulnerability assessments

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:

  • With your MT5 broker to execute trades (credentials only)
  • With service providers who assist in operating the Platform
  • When required by law or to respond to legal processes
  • To protect the rights and safety of SmartEA and its users

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion, your personal data will be removed within 30 days, except where retention is required by law. MT5 credentials are immediately deleted upon disconnecting your trading account.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data
  • Portability: Request transfer of your data in a machine-readable format
  • Objection: Object to processing of your data in certain circumstances

7. Cookies

We use essential cookies for authentication and session management. These cookies are necessary for the Platform to function and cannot be disabled. We do not use advertising or tracking cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a notice on the Platform. Your continued use after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related inquiries, please contact us at support@xauaibot.com

WhatsApp