Privacy Policy

1. Introduction

TheTradersHub ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and your rights when you use our Service at thetraders-hub.com and our associated mobile applications (together, the "Service").

For the purposes of UK data protection law (including the UK GDPR and the Data Protection Act 2018), TheTradersHub is the data controller for personal data processed in connection with the Service. You can contact us at tradershubsupport@gmail.com.

By using the Service, you agree to the collection and use of information as described in this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you register, we collect your full name, email address, and password (stored as a secure hash — never in plaintext).

If you choose Sign in with Google or Sign in with Apple, we receive your name and email address (or Apple's private relay address, if you choose to hide yours) and a provider identifier from Google or Apple instead of a password. We record which sign-in method you used.

2.2 MT5 Account Credentials

To connect your MetaTrader 5 accounts, we collect your MT5 account number, password, and broker server name. These credentials are stored encrypted and transmitted securely to MetaAPI solely to establish and maintain your account connections.

2.3 Trading Data

To operate the Service, we access trading data from connected MT5 accounts including open positions, trade history, account balance, and equity. This data is used solely to provide the features you enable (trade copying, position display, analytics).

2.4 Billing Information

Payments are processed by Stripe. We do not store full card details. We receive from Stripe: subscription status, billing history, Stripe customer/subscription identifiers, and limited payment method details (e.g. last four digits).

2.5 Device and Usage Data

We may collect push notification identifiers (to send trade alerts if you opt in), IP addresses, and logs and usage data (pages/screens visited, error logs) to secure and improve the Service. We use your IP address to derive an approximate location (country, region, city) for security and analytics.

This includes a record of which pages you view and in what order, so we can see where people get stuck. These records are kept against your account if you are signed in, and otherwise against a pseudonymous key that we regenerate daily from your IP address and browser, which cannot be turned back into your IP address and does not allow us to recognise you from one day to the next. This logging places no cookies or other storage on your device, so it does not depend on your cookie choice. We keep these records for up to 180 days. The key is derived using a secret only our servers hold, and we do not use it to identify you or link you to an IP address.

We also record how you use the website and the iOS app (for example: buttons and links you tap, screens you open, features you use such as adding an account or starting the copier, whether an action succeeded, time spent, app version and errors) so we can understand which features help traders and where people give up. When you are signed in, these records are linked to your account. When you sign in or create an account, the pseudonymous records described above from the preceding two hours are linked to your account, so that we know how you found us. We record the labels of buttons and links as they appear on screen, with numbers removed and hidden values (such as balances you have masked) left out, and the text of error messages. We never record what you type into form fields, your passwords or your MT5 credentials. We keep these records for up to 13 months. We do not sell them or use them for advertising.

On the website this analytics places no cookies or other storage on your device. On iOS the app keeps a random install identifier in its own storage (deleted when you delete the app) for records made before you sign in. If you start signing in with Google or Apple on the website, your browser briefly stores how you found us (and any answer to "how did you hear about us") so it can be saved to your new account; it is removed once saved.

2.6 Marketing and Advertising Data

Where you consent to advertising and analytics cookies (see Section 11), we collect marketing-attribution data when you arrive from one of our adverts or tracked links: the referring campaign, keyword, ad and Google Click ID (gclid), the page you landed on, the referrer, your approximate location, and device type. We use this to measure which adverts lead to sign-ups and to improve our campaigns. We share conversion events (that a sign-up occurred) with Google Ads. We do not use your trading data for advertising.

2.7 Session Recording

Where you consent to analytics cookies (see Section 11), we use Microsoft Clarity to record how the Service is used: clicks, taps, scrolling, mouse movement and the pages you view, together with your device, browser and approximate location. This covers our public pages and the signed-in application, so that we can see where people get stuck.

What is never captured: the contents of any form field, including passwords and trading-account credentials, which Clarity masks before anything leaves your browser; and your card details, which you enter inside Stripe's own payment frame that Clarity cannot see into. We also configure Clarity to mask on-screen text such as account numbers and balances.

We do not record the password-reset page, the admin area, or mentor pages, so a recording never contains another user's personal data. Recording only happens if you accept analytics cookies (see Section 11).

3. Lawful Bases for Processing

We process your personal data on the following lawful bases under UK GDPR:

• Contract: to provide the Service you request (account access, trade copying, subscription management).
• Legitimate interests: to secure the Service, prevent fraud and abuse, and improve reliability.
• Legal obligation: to comply with applicable laws (e.g. billing records for tax compliance).
• Consent: where required, such as sending push notifications (you can withdraw by disabling notifications in your device settings at any time).

4. How We Use Your Information

We use the data we collect to:

• Provide, operate, and maintain the trade copying Service
• Authenticate you and manage your account
• Process payments and manage your subscription
• Send push notifications about trade activity (if enabled)
• Send transactional emails (confirmations, password resets, billing receipts)
• Respond to support requests
• Detect, prevent, and investigate fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell your personal data. We do not use your trading data for advertising.

5. Data Sharing

We share your data only as strictly necessary with the following service providers:

• MetaAPI / CopyFactory — MT5 account connectivity and trade copying (MT5 credentials and trading data shared as required to operate the Service).
• Supabase — database hosting, authentication, and backend services.
• Stripe — payment processing and subscription management.
• OneSignal — delivery of mobile push notifications. OneSignal receives your device's push identifier and your account ID so a notification reaches the right person.
• Expo — delivery of mobile push notifications to older app versions, and delivery of app updates.
• Google and Apple — sign-in, if you choose to sign in with your Google or Apple account.
• Microsoft Clarity — session recording and analytics on our public pages, only if you accept analytics cookies (see Sections 2.7 and 11). Microsoft handles this data under the Microsoft Privacy Statement.

We may also disclose information if required by law or in response to valid requests by public authorities.

6. International Data Transfers

Some of our service providers (including MetaAPI, Stripe, Supabase, Expo, OneSignal, Google, Apple and Microsoft) may process data outside the United Kingdom. Where this occurs, we take steps to ensure an adequate level of protection through appropriate contractual safeguards (including standard contractual clauses where applicable).

7. Data Retention

We retain personal data for as long as necessary to provide the Service and meet our legal obligations. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law (e.g. billing records for tax compliance). MT5 credentials are removed from our infrastructure providers promptly upon account deletion.

8. Security

We implement industry-standard security measures including:

• Encryption of sensitive credentials at rest
• TLS encryption for all data in transit
• Row-level security (RLS) policies on our database
• Secure authentication via Supabase Auth

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Access — request a copy of data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data (subject to legal retention requirements).
• Restriction — request restriction of processing in certain circumstances.
• Portability — request a portable copy of certain data.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is consent-based (e.g. push notifications), withdraw at any time via your device settings.

To exercise any of these rights, contact us at tradershubsupport@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO).

10. Automated Processing

The trade copying feature automates the replication of trades based on settings you configure. This does not constitute automated decision-making under Article 22 UK GDPR — all decisions about which accounts to connect and what settings to apply are made by you.

11. Cookies & Similar Technologies

Essential cookies and storage. We use cookies and local storage that are strictly necessary to operate the Service (e.g. authentication and session). These do not require consent.

Analytics and advertising cookies. We use Google Ads and our own first-party analytics to measure which adverts lead to sign-ups, and Microsoft Clarity to record sessions on our public pages (Section 2.7). These technologies (including the Google tag, marketing-attribution storage described in Section 2.6, and Clarity) are set only after you accept via our cookie banner. We use Google Consent Mode, so until you accept, no advertising or analytics cookies are stored on your device.

Microsoft Clarity cookies. If you accept, Clarity sets first-party cookies that keep an anonymous ID and link your page views into one session (_clck, which lasts up to a year, and _clsk, which lasts a day), and may set Microsoft third-party cookies (CLID, MUID, ANONCHK, MR, SM). We instruct Clarity not to share your data with Microsoft Advertising. Clarity keeps recordings for 30 days (selected recordings for up to 9 months) and stores them in the Microsoft Azure cloud.

You can accept or reject non-essential cookies when you first visit, and you can change your choice at any time by clearing your browser storage for this site. If you reject, we will not track your ad attribution, Google Ads will not store cookies on your device, and no session recording will take place.

12. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal data from children. Contact us at tradershubsupport@gmail.com if you believe a child has provided us with personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in the Service. Continued use after changes take effect constitutes acceptance of the updated policy.

14. Contact

Questions about this Privacy Policy or our data practices: tradershubsupport@gmail.com