Privacy Policy
Privacy Policy
This policy explains the personal information X Capital holds, the reasons we hold it, and the control you have over it. We keep what we collect to what the platform actually requires to function.
01Who we are
X Capital ("we", "us", "our") runs the automated trading platform on this website. For the personal information we gather about you, we act as the data controller.
02What we collect
We collect only what running the Service requires:
- Identity - your name, email and country of residence
- Trading account - the broker, your MT4 / MT5 account number, balance and equity, and the API credentials needed to place trades
- Technical - IP address, browser and device details, and anonymised usage data
- Support - the messages and files you send when you contact us
- Payment - handled by our payment provider; we do not keep full card numbers
03Why we use it
Your information lets us:
- Run and look after the Service
- Place trades on your account through the API
- Bill and collect the monthly subscription fee when it falls due
- Send you service messages and transactional emails
- Help you when you contact support
- Improve things using anonymised usage data
- Meet our legal duties
- Spot and stop fraud or misuse
We do not use your data to make automated decisions that have legal or similarly serious effects on you.
04Our legal grounds
For people in the UK and EU, we rely on these grounds to process your data:
- Contract - to deliver the Service you signed up for
- Legitimate interests - to make the Service better and keep it secure
- Consent - for non-essential cookies and any marketing
- Legal obligation - to comply with the law
05Who we share with
We pass information only to the providers needed to run the Service:
- Trading-connectivity provider - the cloud service that links to your broker on our behalf
- Broker and payment providers - to deduct or collect fees securely
- Email provider - to send transactional and service mail
- Hosting provider - to run the platform's infrastructure
- Analytics provider - to see, anonymously, how the site is used
We never sell, rent or trade your personal information.
06Cookies and similar technologies
We use a handful of cookies to make the site work and to learn how it is used:
- Essential - needed for the site to function, such as remembering your cookie choice
- Analytics - anonymised data to help us improve, loaded only once you have agreed
We run no advertising or third-party tracking cookies. Set your preference from the banner on your first visit, or in your browser at any time. Turning analytics off will not stop you using the Service.
07How long we keep it
We hold your personal data while your account is open and for a sensible period afterwards, to meet legal, accounting and dispute-handling needs. Records tied to trading are generally kept for seven years, in line with financial record-keeping norms, after which we delete or anonymise them.
08Your rights
If you are in the UK, EU, or another place with comparable privacy law, you can:
- Ask for a copy of the data we hold on you
- Have inaccurate or incomplete data corrected
- Ask us to delete your data, within what the law lets us keep
- Object to, or limit, certain uses
- Get your data in a portable, machine-readable form
- Take back consent where consent is what we relied on
- Complain to your local data-protection regulator (in the UK, the Information Commissioner's Office)
To use any of these, send a request through our normal support channel and we will reply within 30 days.
09Sending data abroad
Some providers we use sit outside the UK and EU. When we move personal data across borders, we put appropriate protections in place, such as Standard Contractual Clauses or an equivalent legal mechanism, so it stays safeguarded.
10Keeping data secure
We protect your data with standard safeguards: encryption while it is in transit, tight access controls, and regular review of our systems and providers. No setup is ever completely secure, though, so keep your own credentials safe and use a strong, unique password.
11Children
The Service is not aimed at anyone under 18, and we do not knowingly collect data from children. If we find that we have, we will delete it.
12Updates to this policy
We may revise this policy from time to time. The "Last updated" line above shows the latest version, and we will tell you about anything significant by email or through the platform.