Bretary ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard personal information when you visit our website, create an account, or use our trading services (the "Services").
1. Information We Collect
1.1 Information You Provide
- Email address, password (stored in hashed form), and referral codes.
- Identity verification data (name, date of birth, government ID) when required.
- Payment and withdrawal details necessary to process transactions.
- Communications with customer support.
1.2 Automatically Collected Data
- Device type, browser, operating system, and IP address.
- Session identifiers, login timestamps, and user agent strings.
- Pages visited, features used, and trading activity on the Platform.
- Performance logs and error reports for security and reliability.
2. How We Use Your Information
We use personal data to:
- Create and manage your trading account.
- Authenticate logins and maintain secure sessions.
- Process deposits, withdrawals, and trade execution.
- Comply with anti-money laundering (AML) and know-your-customer (KYC) obligations.
- Detect fraud, abuse, and unauthorized access.
- Improve platform performance and user experience.
- Send service-related notices, security alerts, and regulatory communications.
- Respond to support inquiries and dispute resolution requests.
We do not sell your personal information to third parties for marketing purposes.
3. Cookies & Similar Technologies
We use cookies and comparable technologies to keep you signed in, remember preferences, analyze traffic, and enhance security. Essential cookies are required for core functionality; analytics cookies help us understand how the Platform is used. You may adjust cookie settings in your browser, though disabling certain cookies may limit functionality.
Authentication sessions may be stored using HTTP-only, secure cookies with limited lifetimes to reduce exposure to cross-site attacks.
4. Data Protection Measures
We implement administrative, technical, and organizational safeguards appropriate to the sensitivity of the data we process, including:
- TLS/SSL encryption for data in transit.
- Bcrypt or equivalent hashing for passwords.
- Role-based access controls for internal systems.
- Session management with device and IP logging.
- Regular monitoring for suspicious activity.
No method of transmission over the Internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Data Retention
We retain personal information for as long as your account is active and as needed to fulfill legal, regulatory, accounting, and dispute-resolution requirements. When data is no longer required, we delete or anonymize it in accordance with our retention schedule.
6. Third-Party Sharing
We may share information with trusted third parties only when necessary:
- Payment processors to facilitate deposits and withdrawals.
- Identity verification providers for KYC/AML compliance.
- Cloud infrastructure partners that host our systems under strict data-processing agreements.
- Google OAuth if you choose social login — limited to authentication data provided by Google.
- Regulators or law enforcement when legally compelled or to protect rights and safety.
Third parties are contractually required to use data only for specified purposes and to maintain appropriate security standards.
7. International Transfers
Your information may be processed in countries other than your own. Where required, we implement safeguards such as standard contractual clauses to ensure adequate protection for cross-border data transfers.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access and receive a copy of your personal data.
- Correct inaccurate or incomplete information.
- Request deletion of data, subject to legal retention obligations.
- Object to or restrict certain processing activities.
- Withdraw consent where processing is consent-based.
- Lodge a complaint with a data protection authority.
To exercise these rights, contact us through the Platform support channels. We will respond within the timeframe required by applicable law.
9. Children's Privacy
Our Services are not directed to individuals under 18. We do not knowingly collect personal information from minors. If we become aware of such collection, we will delete the data promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through the Platform or via email where appropriate.
11. Contact Us
For privacy-related inquiries, please contact our Data Protection team via the Help section on the Bretary Platform.