Privacy Policy
Last updated: 1 May 2025
Xorunes26 app Inc. ("Xorunes26 app", "we", "us" or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website xorunes26-app.online and use our AI trading platform (together, the "Service"). Please read carefully. If you disagree, please stop using the Service.
1. Information We Collect
1.1 Information You Provide Directly
When registering or interacting with the Service, we may gather:
- Identity information: full name, birth date.
- Contact information: email address, phone number, home address.
- Financial details: broker API keys (read and execute only), investment preferences, and risk settings. We never retain full broker credentials or payment card data.
- Profile settings: username, trading strategy preferences, notification options.
- Communications: messages via support or email.
1.2 Information Collected Automatically
Using the Service, certain technical data is automatically collected:
- IP address, browser type and version, operating system.
- Pages viewed, features utilised, time spent, clickstream data.
- Device identifiers and mobile advertising IDs (where applicable).
- Data from cookies and tracking tools (see our Cookie Policy).
1.3 Information from Third Parties
We may obtain information from third parties such as identity verification, fraud detection services, and analytics partners. This is combined with data we hold to improve accuracy and security.
2. How We Use Your Information
Your data is used to:
- Create and maintain your account and deliver the Service.
- Process and execute trading signals and automated orders on connected brokers.
- Personalise your experience and provide relevant market insights.
- Send transactional emails (account confirmations, trade alerts, security notices).
- Send marketing materials where permitted or consented.
- Identify, investigate, and prevent fraudulent or illegal activities.
- Meet legal and regulatory requirements.
- Enhance, test, and develop new features using aggregated, anonymised data.
3. Legal Basis for Processing (EEA/UK Users)
For users within the European Economic Area or United Kingdom, personal data is processed based on:
- Contractual necessity: to provide the Service you subscribed to.
- Legitimate interests: fraud prevention, security, product improvement.
- Legal obligations: compliance with financial and tax regulations.
- Consent: marketing communications and optional cookies (revocable anytime).
4. Sharing Your Information
We do not sell your personal information. It may be shared with:
- Service providers: cloud hosting, email, analytics, and support partners bound by data protection.
- Connected brokers and exchanges: only essential API commands to execute your chosen strategy.
- Legal authorities: when required by law, court orders, or to protect our rights.
- Business transfers: related to mergers, acquisitions or asset sales, with the acquirer bound by this policy.
5. International Data Transfers
Xorunes26 app operates internationally. Your data may be transferred and processed in countries different from yours, including the US and EU member states. We use approved Standard Contractual Clauses to protect such transfers where necessary.
6. Data Retention
Your data is kept while your account is active or as required to provide the Service. After account closure, some data is retained up to seven years for regulatory compliance. Aggregated anonymised analytics data may be stored indefinitely.
7. Your Rights
Depending on your location, you may have rights to:
- Access personal data we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your data ("right to be forgotten").
- Object to or limit certain processing activities.
- Data portability — obtain your data in a structured, machine-readable format.
- Withdraw consent anytime without affecting prior processing.
To exercise these rights, contact us at . We will reply within 30 days.
8. Security
We implement industry-standard security measures including TLS 1.3 in transit, AES-256 encryption at rest, multi-factor authentication, role-based access control, and annual independent penetration testing. No system is completely secure. We recommend strong, unique passwords and enabling two-factor authentication.
9. Cookies
Cookies and similar tracking tools are used to operate and improve the Service. Full details are in our Cookie Policy.
10. Children's Privacy
The Service is not intended for persons under 18. We do not knowingly collect data from minors. If you believe a minor has provided data, please contact us for removal.
11. Policy Updates
We may update this Privacy Policy periodically. Significant changes will be notified on our website or via email. Continued use indicates acceptance.