سياسة الخصوصية
البيانات القانونية بانتظار تأكيد المشغّل · الإصدار 2026-10-26
1. Controller and contact
The controller is [ZMC legal name], [registration number], [registered address], Dubai, UAE. Privacy enquiries: [contact email]. This draft requires operator and legal review; it is not a claim of certified GDPR compliance.
2. Data collected
We process your account email and display name, language/timezone/theme preferences, MT5 account details, trade history, open positions, prices, rules, notes, emotions, lessons, screenshots, reviews, coaching messages and reports. Connector tokens are stored as secure hashes; MT5 investor passwords are NOT collected. Optional Telegram linking processes your chat identifier and alert preferences. Security and technical logs may include request and device information.
3. Purposes and legal bases
Contract performance: sign-in, storing your journal, imports, requested sync, charts, rules, alerts and AI coaching. Legitimate interests, subject to balancing: security, fraud prevention and service reliability. Legal obligations: applicable regulatory requests. Consent: optional analytics, marketing and any optional communications requiring consent. You may withdraw consent without affecting earlier lawful processing.
4. AI, recipients and processors
Compact summaries of your own trading data and relevant lessons are sent to the AI provider for requested coaching; raw tables are not sent. Messages and reports are stored in your private journal. Processors to confirm: [hosting provider, AI provider, managed email provider; payment provider when enabled]. Payments are not enabled. Provider locations, contractual safeguards and their own retention must be confirmed before launch. We do not sell your journal data.
5. Retention and deletion
[confirm active-account retention, deletion completion and backup expiry periods]. You can delete your account through Settings; screenshots are removed before account deletion. Backup expiry, technical-log retention and any legally required exceptions need operator confirmation. Do not upload data you are not authorized to share.
6. Your rights
Where applicable, you may request access, correction, erasure, restriction, portability, objection and withdrawal of consent. Export all positions as CSV and delete your account in Settings; contact [contact email] for other data, transcripts or assistance. You may complain to the competent data-protection authority. Identity may be verified before responding; statutory deadlines apply.
7. Transfers and security
[confirm processing countries, GDPR transfer safeguards and EU representative where required]. Private records are owner-scoped, screenshots use private storage and temporary signed links, and server operations validate callers. No security measure is absolute. Nerva does not use coaching to make legally significant automated decisions about you.