Privacy Policy

Who is responsible for your data

[Company legal name], [Registered address], [Country] is the controller of the personal data described here. Questions or requests about your data: [support email].

This policy covers the Lab website and application, FXNook Telemetry, and our support. It does not cover your broker, your MetaTrader terminal, or other websites linked from the Lab.

What we collect

We collect only what the Lab needs:

• Account details: your name, email address, password (stored only as a secure hash) and account settings.
• Your work: files you upload, every version the Lab makes, your strategies, job requests and results, certificates, and messages you write to the Lab.
• Usage and billing: your Plan, credit balance and history, jobs run, receipts and payment status. Card details go straight to our payment provider; we never see or store them.
• Telemetry data (only if you connect a program): what your program reports, such as its name and version, rules, signals, decisions, orders, trades, errors and heartbeats, the symbol and timeframe, a one-way hash of the trading account number, the account type (demo or real), the terminal build and time zone, and the internet address the reports come from. We do not receive your broker password or trading credentials.
• Support: what you write to support and any files you attach.
• Feedback: ratings and comments you give on jobs, and whether you allow us to show a review.
• Technical data: IP address, browser and device type, and security logs, used to keep accounts safe and stop abuse.
• Agreements: when you accept our terms or the purchase policy, we record the exact wording, its version, the date and time, your IP address and your browser. It is our proof of what was agreed.

Why we use it, and on what legal basis

• To provide the Lab and run the jobs you ask for (performance of our contract with you).
• To bill you, keep accounts, prevent fraud and meet tax and accounting rules (contract and legal obligation).
• To keep the Lab secure, enforce limits and investigate abuse (our legitimate interest in a safe service).
• To answer support requests and improve the Lab, for example by fixing problems that feedback reveals (legitimate interest).
• To send service emails, such as job results, receipts, security notices and terms changes (contract and legitimate interest). We only send marketing emails if you agree, and you can opt out any time.

What we never do

We do not sell personal data. We do not show you advertising. We do not use your code, your strategies or your telemetry to train AI models, and we do not share them with other customers.

Who processes data for us

We use trusted service providers ("processors") under contract, only for the purposes above: hosting and databases, AI providers that process the code needed for a job (under business terms that do not allow them to train on it or keep it longer than needed), payment processing, email delivery, and security services. We choose these providers and can change them; this never changes what you own.

We may disclose data if the law requires it, to protect rights and safety, or to a company that takes over the Lab, which would then be bound by this policy.

International transfers

Some providers may process data outside your country. Where the law requires it, we use recognised safeguards such as standard contractual clauses, and we choose providers that protect data to a comparable standard.

What the Lab remembers to save you credits

When the Lab converts a function or finds a fix that works in your code, it remembers the result for 60 days, for your account only, so doing the same again costs less. Each project also remembers choices you made in earlier jobs, such as code you chose to keep. Your standing instructions in Settings stay until you change them. None of this is shared with anyone else, and it is deleted with your account.

How long we keep data

• Projects and their versions: until you delete them. A deleted project is removed with all its versions within 30 days.
• Telemetry history: for the history period of your Plan, shown in the Lab, then deleted automatically.
• Jobs waiting for your answer: closed after 14 days.
• Payment and invoice records: as long as tax and accounting law requires.
• Records of agreements, and security logs needed to investigate abuse: as long as a claim or dispute could arise.
• Your account: until you delete it. After deletion, remaining copies leave our backups within 30 days.

Your rights

Depending on where you live (for example under the GDPR, the UK GDPR or California law), you may have the right to access your data, receive a copy in a portable form, correct it, delete it, restrict or object to some uses, and withdraw consent you gave. Write to [support email]; we answer within 30 days and may ask you to confirm your identity. You can also complain to your data protection authority.

You can delete projects and files yourself at any time, and delete your account from Settings.

Keeping data safe

Files are private to your account. Keys and secrets are stored encrypted, passwords are hashed, telemetry tokens are stored only as hashes, download links are signed and expire after 15 minutes, and access to the systems behind the Lab is limited to the people who run it. If a breach affects your data in a way that puts you at risk, we tell you and the authorities as the law requires.

Children

The Lab is not for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us data, contact us and we will delete it.

Cookies

The Lab uses only cookies it needs to keep you signed in and secure, and browser storage for small choices such as closed notices. No advertising or tracking cookies. Details are in the Cookie Policy.

Changes

If this policy changes in a way that matters, we tell you in the Lab first. The date at the top shows the version in force.