Privacy policy

To be completed and validated before going live. This text describes faithfully how the application works technically, but the statements about the data controller, the legal bases and the processors must be completed to match your actual situation.

Data controller

[Name], [address]. Contact: support@thebotanalyzer.com. Data protection officer: [if applicable].

Data collected

User account

Name or nickname, email address, hashed password, time zone, display currency, and optionally a phone number and a Telegram conversation ID, only if you enable those alert channels.

Imported reports

The file you upload and the transactions extracted from it: instrument, direction, volume, timestamps, prices, stop, target, commission, swap, result. For a report analysed without an account, the source file is deleted after thirty days; the numeric result of the analysis, which carries no broker identifier, is kept.

Bridge data

Balance, equity, margin, number of open positions, and the account's transactions. This also includes the declarative information your terminal sends: account number, broker name, server, leverage, currency. No broker password is requested or stored.

Technical data

IP address at the time of analysis and of sign-in, user agent, timestamps of sensitive actions. A strictly necessary session cookie, and where applicable a "stay signed in" cookie that you choose to enable.

Purposes and legal bases

Providing the service (performance of the contract): analysis, grading, monitoring, alerts, circuit breaker.
Security (legitimate interest): abuse prevention, rate limiting, log of sensitive actions.
Billing (legal obligation): retention of accounting records for the applicable statutory period.
Anonymised statistics (legitimate interest): aggregated public directory, published only from three distinct owners onwards and upon explicit activation of sharing.

Retention periods

File uploaded without an account 30 days

User account data until deletion

Live history depends on the plan

"Stay signed in" token 30 days

Reset link 1 hour

Accounting records statutory period

Recipients

Your data is neither sold, nor rented, nor passed on for advertising purposes. It is shared only with the providers required for the service to operate, strictly to the extent necessary: host, email sending service, instant messaging if you enable it, SMS operator if you enable it, payment provider if you subscribe to a paid plan. [Complete the named list of your processors.]

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. Full erasure is available on your own from your settings: it is immediate, removes imported files and permanently detaches your analyses from your identity — only anonymous measurements remain, with no address, no name and no IP address. For any other request, write to support@thebotanalyzer.com. You may lodge a complaint with the competent supervisory authority.

Security

Hashed passwords, HttpOnly and SameSite cookies, CSRF protection on forms, exclusively prepared SQL statements, rate limiting on sensitive endpoints, individually revocable bridge tokens.

Last updated: [date].