Legal
Draft notice: This page is a working draft pending review by qualified counsel. It is not final and should not be relied on as legal advice or a finished agreement until reviewed.
Last updated: July 25, 2026
Trading Solutions by E.A Victor ("we", "us") is operated by E.A Victor as an individual. This policy explains what we collect through tradinsolutions.cfd (the "Platform") and why.
Data we collect: Account details (name, email, password hash); billing data processed by Stripe (we never see or store your card number); trading-account identifiers you connect (broker login, server, platform) for the trade copier, signal copier, and journal features; the trades, positions, and account state those connections read so we can mirror, log, or display them; support messages; and basic product-usage events.
Broker credentials — handled narrowly, on purpose: When you connect an account for copying or journaling, your broker credentials are sent directly to our trade-execution provider (MetaApi) to open the connection. We do not store your broker password in plaintext on our own servers. Every connected account — including a "master"/source account used only for copying trades out or for the journal — uses your full trade password, since that's what our execution provider requires to open any connection; a "slave"/destination account that places trades uses the same full trade password for the same reason.
Why we process your data: Where GDPR or similar law applies, we rely on the following lawful bases for processing: account and billing data is processed because it's necessary to perform our contract with you (providing the tier or features you signed up for); product-usage analytics is processed based on our legitimate interest in understanding and improving the Platform; and marketing email sent through Loops.so is processed based on your consent, which you can withdraw at any time by unsubscribing.
Cookies & analytics: We use cookies in two categories. Necessary: a session cookie that keeps you signed in, required for the Platform to function. Analytics: Plausible, which is cookie-less and does not collect personally identifiable data. We do not use advertising, tracking, or other non-essential cookies.
Third parties we share data with, and why: Stripe (billing), Supabase (database & auth), MetaApi (broker connections & trade execution), Resend (transactional email), Loops.so (product email & newsletter, opt-in), Anthropic (AI features, e.g. the economic-calendar assistant — trade/account data is not sent to it unless a feature explicitly says so). We do not sell your data to anyone.
International data transfers: Some of our sub-processors, including Stripe and Anthropic, are based in the United States or otherwise process data outside your home country. Where applicable law requires a safeguard for such transfers, we rely on Standard Contractual Clauses or an equivalent lawful transfer mechanism. [INTERNATIONAL_TRANSFER_MECHANISM — to be confirmed with counsel: exact mechanism/certification relied on per sub-processor].
Data Protection Officer: Given our current size, we have not appointed a formal Data Protection Officer. Privacy questions and rights requests go to hello@tradinsolutions.cfd. [DPO_REQUIREMENT — to be confirmed with counsel whether a DPO is legally required for our processing volume and jurisdictions].
Retention: Account and billing records are kept for as long as your account is active, plus a reasonable window after closure for tax and accounting purposes ([RETENTION_PERIOD — to be confirmed with counsel, likely tax-driven]). Broker connection state — including any connection tokens or cached credentials held by our execution provider on your behalf — is deleted when you disconnect an account. Support messages are kept as long as reasonably needed to resolve and document your request.
Your rights: Depending on where you live, you may have the right to access the personal data we hold about you, correct inaccurate data, request erasure of your data, request a portable copy of your data in a commonly used machine-readable format, object to certain processing (including processing based on legitimate interest), request that we restrict processing in certain circumstances, and withdraw consent at any time where processing is based on consent (such as marketing email). If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority. To exercise any of these rights, email hello@tradinsolutions.cfd. We'll respond within a reasonable time and confirm once it's done.
California residents: If you are a California resident, you may have additional rights under the CCPA/CPRA, including the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the sale or sharing of personal information — we do not sell or share your personal information as those terms are defined under CCPA/CPRA. To exercise these rights, email hello@tradinsolutions.cfd. [CCPA_APPLICABILITY — to be confirmed with counsel; remove this section if the Platform is not targeting, or does not have a meaningful number of, US/California members].
Changes: If this policy changes materially, we'll update the date above and, for significant changes, notify active members by email.