PRIVACY POLICY

This Policy explains how Volantis LLC, operating Atlassync (“we”), handles personal data. Our business mailing address is 30 N Gould St, Ste R, Sheridan, WY 82801, United States. Questions and privacy requests may be sent to support@atlassync.io.

1. Data we collect

• Account data: name, email address, password hash, country or region, referral relationship, account status, and communication preferences.
• Connected-account data: broker and account identifiers, account currency, balances, equity, positions, order and trade records, software configuration reported by the EA, and account-sharing permissions.
• Technical and security data: IP address, device and browser information, login and audit records, API requests, error logs, connection status, and diagnostic information.
• Payment and subscription data: customer, transaction, tax, invoice, payment status, and subscription identifiers received from Stripe. Full card details are submitted to and stored by Stripe, not Atlassync.
• Support data: messages, attachments, and information you provide when requesting assistance.

We do not ask for or store your MetaTrader trading password, VPS administrator password, cloud-provider API key, or full payment-card number. Your trading funds remain with your broker.

If you voluntarily use the Vultr OAuth setup option, Vultr supplies Atlassync with short-lived, scoped access and refresh tokens instead of your password or API key. We use them only to create and verify the VPS and its temporary startup script in your Vultr account. The tokens are encrypted while authorization or provisioning is in progress and erased after the VPS becomes active, the attempt fails, or an unused connection expires. Your Vultr account, billing relationship, server and administrator credentials remain under your control.

2. Why we use data

We use personal data to create and secure accounts; license and operate the software and dashboard; connect customer-authorised accounts; provide support and updates; process subscriptions, taxes, discounts, and invoices; detect abuse and security incidents; maintain records; comply with law; and improve reliability.

Where applicable, the legal bases are performance of our contract, compliance with legal obligations, our legitimate interests in securing and improving the service, and consent where consent is required. You may withdraw consent without affecting earlier lawful processing.

3. Service providers and disclosures

We disclose data only as needed to service providers supporting hosting and infrastructure, payment and tax processing (including Stripe), transactional email, security, error monitoring, support, and limited location detection. They process data under their own terms or on our instructions, as applicable. We may also disclose information when required by law, to protect rights and security, or as part of a merger, financing, acquisition, or sale subject to appropriate safeguards.

If you rent a VPS from Vultr or another provider, that is a separate relationship between you and the provider. Atlassync does not receive your cloud-provider credentials merely because you use our installer. If you use an account-sharing feature, authorised viewers can see the connected data described by that feature until access is revoked.

We do not sell personal data or connected trading data.

4. International transfers

Volantis LLC and its providers may process data outside your country. Where required, we use recognised transfer mechanisms and safeguards, such as adequacy decisions or standard contractual clauses. You may contact us for information about safeguards relevant to your data.

5. Retention

We retain account and service data while your account is active and afterwards only as long as reasonably necessary for contractual, security, dispute, tax, accounting, and legal purposes. Retention periods depend on the type of record and applicable law. When data is no longer required, it is deleted or anonymised. You may request account deletion, subject to records we must retain.

6. Security

We use access controls, credential hashing, encrypted transport, logging, backups, and other technical and organisational safeguards appropriate to the service. No online system is completely secure. You are responsible for using a strong, unique password and protecting account-sharing and activation codes.

7. Cookies and local storage

We use cookies or browser storage that are necessary for login, security, preferences, and referral attribution. If optional analytics or marketing technologies are introduced, we will provide any consent controls required by law and update this Policy.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, withdraw consent, and complain to a data-protection authority. In Sweden, the supervisory authority is Integritetsskyddsmyndigheten (IMY). We may need to verify your identity before acting on a request. To exercise a right, email support@atlassync.io.

9. Children

Atlassync is not directed to children and may not be used by anyone under 18. We do not knowingly collect personal data from children.

10. Changes

We may update this Policy and will publish the new date. We will provide additional notice for material changes where required.