PRIVACY POLICY

1. What We Collect

• Account data: Email address, hashed password, referral code.
• Trading data: Position data, equity snapshots, EA planning values — sent via encrypted webhook from the EA running on the dedicated server we provision for you. We store this to power your dashboard.
• Technical data: IP address (for region detection), browser type, page views.
• Compliance data: Country of residence (declared and IP-detected), Whop billing/card country at checkout — used to apply correct regional configuration and meet our regulatory obligations.

We do not collect: MT5 broker passwords (you enter these directly into MetaTrader on your dedicated server), bank or card details (payments are processed by Whop as Merchant of Record), or personal identification documents.

2. How We Use Your Data

• Provide and operate the Service (dashboard, trade monitoring, alerts)
• Validate your subscription status
• Send service notifications (trial reminders, EA offline alerts)
• Detect your region to show appropriate content and apply regulatory constraints
• Improve the platform based on aggregate usage patterns

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Data on Your Dedicated Server

As part of your subscription, Atlassync provisions a dedicated server (VPS) on third-party cloud infrastructure (currently Vultr). Atlassync is the cloud-provider account holder; you have exclusive Administrator-level remote access.

What lives on that server: the Windows operating system, MetaTrader 5, the Atlassync EA, the broker login credentials you enter into MetaTrader, and any chart layouts, indicator settings, or files you place there.

Atlassync's access to that data: Atlassync does not actively read or extract the contents of your dedicated server, including your MT5 broker credentials, beyond the telemetry the EA itself reports over the webhook (position data, equity, planning values — the same data shown to you on the dashboard). Operator access exists only to install the EA at provisioning time, respond to your direct support requests, or investigate suspected violations of the Acceptable Use terms (Terms of Service Section 4).

Server location: Servers are provisioned in the Vultr region closest to a recommended broker for your declared region (typically a US data center for international subscribers and a US-based data center for US subscribers). Specific region is shown on your dashboard.

Destruction on subscription end: Upon cancellation, expiry, or termination of your subscription, your dedicated server and all data on it (including MT5 broker credentials, chart files, and any other content) is permanently destroyed within 48 hours. Atlassync does not retain backups of customer server contents. You are responsible for retrieving anything you wish to keep before that point.

4. Data Storage and Security (Atlassync Platform)

Account data and trading telemetry are stored on Atlassync servers located in the EU (Hetzner, Germany). All connections are encrypted via TLS/HTTPS. Passwords are hashed with bcrypt. Webhook secrets are unique per account and can be regenerated at any time.

5. Third-Party Services

• Whop: Merchant of Record for subscription billing. We do not store card details. Subject to Whop's privacy policy.
• Vultr: Cloud infrastructure provider for the dedicated servers. Subject to Vultr's privacy policy. Atlassync is the account-of-record; individual subscribers are not Vultr customers.
• IP Geolocation: We use ipapi.co / api.country.is for region detection. Only your IP is shared; no personal data.

6. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of all data we hold about you.
• Rectification: Correct inaccurate data.
• Deletion: Request deletion of your account and associated data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at support@atlassync.io.

7. Data Retention

Account data is retained while your account is active. Trading telemetry (positions, equity snapshots, trade events stored on the Atlassync platform) is retained for up to 24 months after account closure for performance analysis. Server contents (the dedicated server itself) are destroyed within 48 hours of subscription end per Section 3. You may request earlier deletion of platform data.

8. Cookies

We use localStorage (not cookies) for session management and region preferences. No third-party tracking cookies are used. Analytics, if implemented, will use privacy-respecting solutions.

9. Changes

We may update this policy. Material changes will be communicated via email. The "last updated" date at the top reflects the most recent revision.