Privacy Policy

We collect several types of information to provide and improve our service.

Account Information

When you create a Signalync account, we collect your name, email address, and password (stored as a cryptographic hash, never in plain text). If you subscribe to a paid plan, Stripe (our payment processor) collects your payment information directly. We do not store your credit card number, CVC, or billing address on our servers.

Usage Data

We collect data related to your use of the service, including:

• Trading signals sent and received (symbol, action, parameters)
• Trade execution results (entry price, exit price, profit/loss)
• Connection metadata (connection times, heartbeat status, EA version)
• Analytics and performance metrics derived from your trade data
• AI chat conversations and strategy generation requests
• Signal source configurations and symbol mappings

Technical Data

We automatically collect technical information when you access Signalync, including your IP address, browser type and version, operating system, referring URLs, and pages visited within the application.

Payment Data

Payments are processed entirely by Stripe. We receive and store only your subscription status, plan type, billing cycle dates, and Stripe customer ID. We never have access to your full card details.

We use the information we collect to:

• Provide, operate, and maintain the Signalync platform
• Process and route trading signals to your connected broker accounts
• Generate trade analytics, performance metrics, and equity curves
• Process subscription payments and manage billing
• Send transactional emails (verification, password reset, billing receipts)
• Send alert notifications (connection lost, signal errors, drawdown alerts) via your chosen channels
• Provide AI-powered trade analysis and strategy generation
• Monitor service health, detect abuse, and prevent fraud
• Improve the platform based on usage patterns and feedback
• Respond to support requests

Signalync processes trading signals and trade execution data as a core part of the service. This includes signal parameters (symbol, action, volume, stop loss, take profit), trade results, and connection activity.

Important: Signalync never stores your broker account credentials. The MT5 Expert Advisor authenticates using a license key only. We have no access to your broker login, password, or account funds.

Trade data is used to generate analytics visible in your dashboard (equity curves, win rates, drawdown charts, calendar heatmaps). This data is associated with your account and is not shared with other users unless you explicitly publish a strategy to the Strategy Marketplace, in which case only the aggregate performance metrics you choose to include are made visible.

Signalync offers AI-powered features including trade analysis chat (Signalync AI) and strategy generation (Strategy Lab). When you use these features, your conversations and relevant trade context are sent to our AI provider (Anthropic, maker of Claude) for processing.

• AI conversations are stored in your account for chat history purposes
• We do not use your trading data or conversations to train AI models
• AI credit usage is tracked per billing cycle for plan enforcement
• Anthropic's data handling is governed by their own privacy policy

We do not sell, rent, or trade your personal information to third parties. We share data only with the following service providers, each necessary to operate the platform:

• Stripe - payment processing (subscription billing, refunds)
• SendGrid - transactional email delivery (verification, alerts, receipts)
• Anthropic - AI features (trade analysis, strategy generation)
• Vercel - frontend hosting and CDN
• Cloudflare - DNS, CDN, SSL, and DDoS protection
• Hetzner - backend infrastructure and database hosting

We may also disclose information if required by law, court order, or governmental regulation, or if necessary to protect the rights, safety, or property of Signalync LLC, our users, or the public.

Your data is stored in a PostgreSQL database hosted on Hetzner infrastructure. We implement the following security measures:

• All data in transit is encrypted using TLS (HTTPS)
• Passwords are hashed using bcrypt before storage
• Authentication uses JSON Web Tokens (JWT) with expiration
• Webhook endpoints support secret key verification to prevent unauthorized signals
• WebSocket connections are authenticated via license key
• Rate limiting is applied to API endpoints to prevent abuse

While we take reasonable precautions to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Signalync uses minimal browser storage for essential functionality only:

• Authentication token - stored in localStorage to maintain your login session
• Theme preference - stored in localStorage (signalync-theme) to remember your light/dark mode choice

We do not use third-party tracking cookies, advertising cookies, or analytics cookies. We do not use pixel trackers or social media tracking scripts. We do not participate in ad networks or sell data to advertisers.

We retain your data according to the following schedule:

• Account data - retained for as long as your account is active
• Signal logs - retained for 90 days by default
• Trade history - retained for as long as your account is active
• AI chat history - retained for as long as your account is active
• Backtest reports - retained for as long as your account is active (up to 50 reports per account)

When you delete your account, all associated data is permanently removed from our systems within 30 days. Backups containing your data may persist for up to 90 days before being overwritten.

You have the following rights regarding your personal data:

• Access - request a copy of the personal data we hold about you
• Correction - request correction of inaccurate personal data
• Deletion - request deletion of your account and associated data
• Export - export your trade data in CSV format from the analytics dashboard
• Restriction - request that we restrict processing of your data in certain circumstances
• Objection - object to processing of your data for certain purposes

To exercise any of these rights, contact us at contact@signalync.com. We will respond to your request within 30 days.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing: We process your data based on contractual necessity (to provide the service you subscribed to), legitimate interest (to improve and secure our platform), and consent (for optional features like AI chat and notifications)
• Data portability: You may request your data in a structured, commonly used, machine-readable format
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority

Our infrastructure provider (Hetzner) operates data centers in the EU. However, some data processing occurs in the United States (Vercel, Stripe, Anthropic). Where data is transferred outside the EEA, we rely on Standard Contractual Clauses and the data protection measures of our service providers.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to delete: You may request deletion of your personal information, subject to certain exceptions
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights
• No sale of personal information: We do not sell your personal information to third parties and have not done so in the preceding 12 months

To exercise your CCPA rights, contact us at contact@signalync.com. We will verify your identity before processing your request and respond within 45 days.

Signalync is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. Trading financial instruments requires you to be of legal age in your jurisdiction. If we become aware that we have collected data from a person under 18, we will promptly delete that information. If you believe a minor has provided us with personal data, please contact us at contact@signalync.com.

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: contact@signalync.com
• Company: Signalync LLC
• Address: 30 N Gould St Ste N, Sheridan, WY 82801, United States

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the dashboard. Your continued use of Signalync after changes take effect constitutes acceptance of the updated policy.

See also our Terms of Service and Refund Policy.