Data Protection

Privacy Policy

This Privacy Policy explains how Arbitrer collects, uses, shares, stores, protects, and deletes personal data and operational data connected to the platform.

Introduction

Arbitrer respects privacy and is committed to protecting personal data. This Privacy Policy applies to the Arbitrer website, web application, dashboard, software, Expert Advisors, payment workflows, support channels, partner tools, franchise features, and related services.

By using the service, you acknowledge that Arbitrer will process information as described in this policy. If you do not agree, you should not use the service.

1. Information you provide

Account information: name, email address, password hash, authentication identifiers, role, approval state, and account preferences.
Phone number: your mobile number, once you verify it with a code we send by WhatsApp or text message.
Payment information: billing email, customer identifiers, subscription identifiers, invoice records, payment status, plan, license status, payout details, commission records, and support references.
License information: broker account numbers, account labels, broker server names, license keys, slot assignments, and account binding requests.
Support communications: messages, attachments, troubleshooting details, bug reports, feedback, onboarding requests, and partner applications.
Profile and community information: referral IDs, franchise relationship, partner tier, whitelabel details, brand assets, subdomain requests, and payout preferences.

2. Information collected automatically

Device information such as browser, operating system, viewport, device type, language, and approximate technical identifiers.
Log data such as IP address, access times, routes visited, referring URLs, error events, and security events.
Usage data such as features used, dashboard views, button interactions, session duration, onboarding progress, and product analytics events.
Payment verification data such as invoice status, subscription state, payment intent or checkout state, amount, billing metadata, and processor responses.
License validation logs such as connection timestamps, validation attempts, connected software version, device status, and heartbeat state.

3. Expert Advisor and trading-infrastructure data

Arbitrer does not ask for broker passwords, broker API keys, full card numbers, payment account passwords, or prop firm login passwords.

When you use Arbitrer-supported Expert Advisors or other account-pairing tools, some technical data may be transmitted so the platform can validate licenses, display status, and support troubleshooting.

Broker account number and broker server name used for license validation.
Master or Slave role, connection state, software version, heartbeat timing, slot assignment, and health status.
Cycle-level operational telemetry such as configured recovery target, phase state, drawdown state, account labels, and dashboard-visible metrics.
Incident, support, and debugging logs needed to diagnose connection or relay problems.

4. Information we do not intentionally collect

Broker login passwords, full card numbers, payment account passwords, seed phrases, or recovery phrases.
Full government identity documents unless required for compliance, fraud prevention, or a specific partner workflow.
Biometric identifiers.
Personal financial statements unless you voluntarily provide them to support or a compliance workflow.
Detailed trade history beyond the metrics needed for dashboard, license validation, support, or user-requested features.

5. How we use information

Create, secure, approve, and manage user accounts.
Verify your phone number and contact you quickly about your account and your live trades.
Send offers, news and setup tips on WhatsApp and by text, only if you ticked the box to receive them. You can turn each off at any time in your account, or with the link in any promotional text.
Send alerts about your trades and pairs on WhatsApp, like a trade opening or closing or a terminal going offline, while you have them switched on.
Validate licenses, manage slots, bind broker accounts, display connection state, and provide dashboard telemetry.
Process subscriptions, payments, refunds, commissions, partner payouts, and billing records.
Provide support, onboarding, incident handling, and product communications.
Operate referral, franchise, partner, whitelabel, analytics, and course features.
Detect abuse, fraud, unauthorized access, suspicious payment activity, policy violations, and security issues.
Improve product reliability, user experience, documentation, pricing, and service capacity.
Comply with legal, accounting, tax, compliance, audit, and regulatory obligations.

6. Legal basis for processing

Contract performance: to provide the service, licenses, dashboard, payments, and support you request.
Legitimate interests: to secure the platform, prevent fraud, improve service, debug issues, and operate analytics where allowed.
Consent: for optional cookies, marketing communications, and certain preference-based features where consent is required.
Legal obligation: for tax, accounting, compliance, dispute, fraud prevention, and law-enforcement obligations.

7. Data sharing and processors

We do not sell personal information. We share data only where needed to operate Arbitrer, fulfill user-requested workflows, protect the service, or comply with obligations.

Provider type	Examples of data	Purpose
Hosting, database, and authentication	Account data, session data, logs, operational records	Run the application securely and reliably
Email and support providers	Email address, message content, support history	Send notifications and handle support
Messaging providers (Meta for WhatsApp, Twilio for text messages)	Phone number, verification status, message content	Send verification codes and, only if you opt in, promotional messages
Payment processors and payout providers	Customer IDs, invoice records, payment status, amounts, payout details	Process payments, refunds, and payouts
Analytics and monitoring	Usage events, page performance, errors, device data	Improve reliability and product experience
Professional advisors and authorities	Relevant account, payment, or dispute records	Comply with law and protect rights
Partner or franchise dashboards	Referral status, subscription status, commission data	Operate partner and whitelabel workflows

8. Security

Data is transmitted over encrypted connections where supported.
Passwords are stored using secure hashing mechanisms through the authentication provider.
Access controls restrict who can view account, payment, and operational records.
Operational logs and monitoring help detect abuse, outages, and suspicious activity.
No internet service is completely secure, and you remain responsible for protecting your devices, email, trading accounts, VPS, billing accounts, and passwords.

9. Data retention

Retention periods may vary where law, security, fraud prevention, disputes, backups, or operational needs require longer retention. Data may be anonymized instead of deleted where appropriate.

Data category	Typical retention	Reason
Account data	While active, then as needed for records	Service access, support, disputes, compliance
Payment records	Up to 7 years where required	Tax, accounting, fraud prevention
License validation logs	Typically 90 days to 24 months	Security, debugging, abuse prevention
Support communications	Typically 2 years after resolution	Follow-up, quality, dispute handling
Analytics events	Aggregated or deleted when no longer needed	Product improvement
Consent logs	As long as needed to demonstrate compliance	Cookie and privacy accountability
Phone number and messaging consent	While the account is active; consent records as long as needed to prove consent	Contact, verification, consent accountability
WhatsApp messages and texts we send and receive	While the account is active	Delivery records, costs, and honouring a STOP reply or stop link

10. Your rights

To exercise rights, contact privacy@arbitrer.io. We may need to verify your identity before fulfilling a request.

Access: request a copy of personal data we hold about you.
Correction: request correction of inaccurate or incomplete data.
Deletion: request deletion where retention is no longer required.
Portability: request a machine-readable export where applicable.
Restriction: ask us to restrict processing in certain circumstances.
Objection: object to processing based on legitimate interests where applicable.
Consent withdrawal: withdraw consent for optional processing such as marketing or non-essential cookies.
Complaint: contact your local data protection authority if you believe your rights have been violated.

11. International transfers

Arbitrer and its providers may process information in countries other than where you live. Those countries may have different data protection laws. Where required, we use appropriate safeguards such as contractual protections, transfer mechanisms, or providers operating under recognized data transfer frameworks.

12. Cookies and tracking

Arbitrer uses cookies, localStorage, sessionStorage, analytics identifiers, and similar technologies to operate the service, remember settings, support authentication, diagnose issues, and improve performance.

For the full inventory, categories, consent controls, and opt-out information, read the Cookie Policy.

13. Third-party platforms

Arbitrer may link to or interact with brokers, prop firms, payment processors, payout providers, analytics providers, video providers, support tools, email providers, and other third-party services. Those third parties have their own policies and practices. Arbitrer is not responsible for third-party privacy practices.

14. Children

Arbitrer is not intended for people under 18 or under the age of majority in their jurisdiction. We do not knowingly collect personal data from children. If we learn that we collected such data, we will take steps to delete it where required.

15. Changes to this policy

We may update this Privacy Policy as the service, providers, law, or data practices change. Material changes may be communicated by email, in-service notice, website notice, or renewed consent prompts where required.

16. Contact

Privacy requests: privacy@arbitrer.io.

General support: support@arbitrer.io.