← Tradova Funding

Privacy Policy

This Privacy Policy explains what personal data Tradova Funding ("we") collects, how we use it, and your rights. It applies to tradovafunding.com and all associated services.

1. What we collect

  • Account data. Email, full name, optional Telegram handle, country, account password (hashed).
  • Payment metadata. Order ID, plan, amount, payment processor reference. We do not store full card numbers — that data stays with Whop / Stripe / the underlying processor.
  • Trading telemetry.Equity, balance, open positions, floating P&L, individual trade events (symbol, lot, side, ticket, time), MT5 build, EA version, server name, IP address — all sent to us by the EA we attach to your terminal under an investor password.
  • Support data. The contents of any support ticket or email you send us.
  • Logs. Server logs (IP, user-agent, timestamp) for security and debugging, retained ≤ 90 days.

2. Why we collect it

  • To deliver the Services you paid for (contract).
  • To enforce challenge rules, detect prohibited strategies, and prevent fraud (legitimate interest).
  • To process payouts and tax-related reporting (legal obligation).
  • To send transactional emails (account creation, MT5 credentials, breach notice, payout updates).

We do not sell your data, and we do not use it to train AI models or for behavioural advertising.

3. Sub-processors

We share the minimum necessary data with these processors:

  • Supabase — primary database and authentication (EU / US regions).
  • Whop — checkout, payment processing, webhook notifications.
  • Resend — transactional email delivery.
  • Telegram — staff alerts only; we do not push your personal data to public channels.
  • Vercel — web hosting; minimal access logs.
  • Sentry — application error tracking; scrubs known PII fields before storage.

4. Retention

  • Account & trading data: while your account is open and 6 years thereafter for tax / audit.
  • Server logs: ≤ 90 days.
  • Email queue records: 12 months for delivery audit.

5. Your rights (GDPR / similar)

You may request to:

  • access the data we hold on you;
  • correct inaccurate data;
  • delete data we no longer need to retain by law;
  • port your data to another service in a machine-readable format;
  • object to processing based on legitimate interest.

Email privacy@tradovafunding.com from the address on your account. We respond within 30 days.

6. Security

All MT5 investor passwords and payment-processor secrets are stored encrypted at rest using AES-256-GCM. Access to production systems is restricted to the operator and is logged. We use TLS for all data in transit. We will notify you within 72 hours of any confirmed breach affecting your data.

7. International transfers

Some processors are based outside the EEA. Where required, we rely on Standard Contractual Clauses approved by the European Commission.

8. Children

The Services are not directed at, and we do not knowingly collect data from, anyone under 18.

9. Changes

We will post material changes on this page and notify you by email at least 7 days before they take effect.

10. Contact

Privacy questions: privacy@tradovafunding.com