Privacy Policy

This Privacy Policy explains how Trading AI Mind collects, uses, shares and protects information when you use our Service. The data controller is CJR TOP STRIKER LLC, 30 N Gould St #50896, Sheridan, WY 82801, USA (“we”, “us”).

1. What we collect

• Account info: email, full name, optional Telegram handle, hashed password (managed by Supabase Auth), language.
• Onboarding data: the prop firm or broker you name and, when you enter them yourself, the MT5 login, server and passwords of your trading account, stored encrypted. If you select Tradova Funding as your prop firm we store only the login, server and status of the account you chose; the password is retrieved from Tradova Funding when your bot is set up and is not kept in our database.
• Broker credentials in use: to run your bot on our managed servers, the MT5 password is decrypted and placed in the configuration of your hosted terminal so the terminal can log in by itself after every restart. Stored encrypted at rest in our database using AES-256-GCM envelope encryption with a key we control.
• AI credits & usage: your prepaid credit balance, top-up transactions, and per-signal usage records (kept for billing transparency).
• Trading activity: heartbeats from your bot (account balance, equity, open positions count, EA version, the IP address of the reporting terminal), trade events (basket opens/closes), your bot settings, and AI-generated signals associated with your account.
• Billing data: handled by Stripe. We store only your Stripe customer ID and the status of your plan and hosting subscriptions.
• Support and reviews: the contents of support conversations (dashboard chat, email, Telegram) and any review you submit (rating, text, display name, country). Display name and country are published with an approved review.
• Operational logs: request IPs, user-agent, timestamp, and the IP addresses approved for your licence. Retained up to 90 days for abuse detection (licence IPs for as long as the licence exists).

2. What we don’t collect

We do not have access to your MT5 account beyond what the bot reports and what it needs to trade. We do not see your withdrawals or your browsing on other sites. We use no third-party analytics tracking on the dashboard.

3. How we use your data

• To operate the Service (generate signals, run your terminal and bot on our servers, render the dashboard).
• To authenticate you and authorise your bot licence token and its approved IP addresses.
• To bill you, prevent fraud, and handle payment disputes.
• To respond to support requests and to alert our own staff (for example when a hosting payment fails).
• To detect and prevent abuse of the API or signal pipeline.
• To publish reviews you choose to submit.

4. Sharing

We share data only with the service providers necessary to operate the Service, and with our affiliated service where you choose to link it:

• Supabase — database, authentication, storage
• Anthropic — the LLM that generates trading signals (receives only market data and trading context, never your personal information)
• Stripe — payment processing
• Vercel — serving the web app; Fly.io — hosting the signal worker
• Virtual server providers — the Windows servers on which your MT5 terminal and bot run
• Resend — transactional email; Sentry — error tracking with personal fields scrubbed
• Telegram — alerts to our own staff and, if you join it, our support group
• Tradova Funding— the prop firm operated by the same company. If you select Tradova Funding as your prop firm, we ask Tradova Funding for the list of your accounts by your account email and, when your bot is set up, for the login, server and password of the account you chose. Tradova Funding also sees the bot’s trading on that account through its own monitoring, under its own Privacy Policy.

We do not sell, rent, or trade personal data with anyone.

5. Retention

Account, billing, and trade history are retained while your account exists and for up to 6 years afterwards for billing and dispute purposes. Support conversations are kept for 2 years after your account closes. Operational logs rotate after 90 days. Hosted terminals and the credentials inside them are removed when your hosting ends. You can request deletion of your account at any time by email or in our Telegram group.

6. Security

All data is transmitted over TLS. Broker passwords are encrypted at rest in our database. Hosted terminals hold the password they need to log in; access to those servers and to production databases is restricted to our operators and audited. We will notify you within 72 hours of any confirmed breach affecting your data.

7. International transfers

We are a US company and our providers operate in the United States and the EU. Where EU or UK data-protection law requires it, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

8. Your rights

Depending on where you live, you may ask to access, correct, delete or receive a copy of your data, to object to processing based on our legitimate interest, or to withdraw a published review. Write to support@tradingaimind.com from the address on your account; we respond within 30 days.

9. Children

The Service is not intended for individuals under 18. We do not knowingly collect data from children.

10. Changes

We may update this policy. We’ll notify users by email or in the dashboard and post the updated date at the top of this page. Continued use after changes constitutes acceptance.

11. Contact

CJR TOP STRIKER LLC (Trading AI Mind) · 30 N Gould St #50896, Sheridan, WY 82801, USA · support@tradingaimind.com · or our Telegram group.