Privacy Policy

1. What we collect

• Account data: email address, a hashed sign-in PIN (never your password in plain form), and your UK-residency self-declaration.
• Broker connection data: encrypted API credentials for your connected broker(s). These are encrypted at rest, never logged, and never visible to us or our staff in plaintext.
• Strategy data: the entry, exit, and filter configurations you build, along with their backtest and live-run history.
• Usage and technical data: login times, IP address, device/browser information, and platform interaction logs needed to operate and secure the service.
• Trading and P&L data derived from your connected broker account, to the extent needed to run and report on your strategies.

2. How we use strategy configuration data

The specific block/parameter combinations that make up your strategies are visible to the Platform for legitimate operational purposes only: customer support, safety monitoring, fraud and abuse detection, and powering features that show us how many armed strategies use a piece of logic before we change it.

• We do not sell your strategy configurations, use them for any purpose beyond the above, or share them with any other user.
• We do not feed your strategy data into any shared or pooled-learning feature without separate, explicit legal clearance for that specific feature, obtained independently of this policy.

3. Why we process your data (lawful basis)

• Performance of a contract — to provide the service you've signed up for.
• Legitimate interests — to keep the Platform secure, detect fraud or abuse, and improve reliability.
• Legal obligation — where we are required to retain or disclose data by law or regulation.
• Consent — for anything not covered above, which we will ask for specifically at the time.

4. Data retention

While your account is active, we retain your data for as long as needed to provide the service. After cancellation, we retain trade history and strategy configurations for 24 months, in case you resubscribe, then delete them. You can request earlier deletion at any time under your right to erasure (Section 7).

5. If Atlas Edge shuts down or is sold

If the business ever ceases operating or is sold to a successor entity, your connected broker credentials will be deleted, not transferred, under any circumstances.

6. Security

• Broker API credentials are encrypted at rest using industry-standard encryption and are never stored or logged in plaintext.
• Access to user data is controlled by row-level access policies at the database level, not merely hidden by the interface.
• We maintain a documented incident-response plan for credential or data breaches, including notifying the Information Commissioner's Office (ICO) within the legally required 72-hour window where a breach is notifiable, and notifying affected users and, where relevant, their broker.

7. Your rights

• Access — you can ask what personal data we hold about you.
• Rectification — you can ask us to correct inaccurate data.
• Erasure ("right to be forgotten") — you can ask us to delete your data, subject to the retention needs described above and any legal obligation to retain it.
• Portability — you can ask for your data in a portable format.
• Objection — you can object to processing based on legitimate interests.

To exercise any of these rights, contact us using the details in Section 9.

8. Third parties we share data with

• Your broker (IG) — only to the extent necessary to execute the connection you set up.
• Our payment processor — to handle billing; we do not store your full card details ourselves.
• Our hosting and infrastructure providers — solely to run the service; they do not have independent rights to use your data.

We do not sell personal data to any third party, and we do not use your data for third-party advertising.

9. Contact

Data protection queries: info@atlas-edge.co.uk.