Last updated: June 2025. Effective immediately.
Account data: Email address, name, and hashed password when you register.
MT5 credentials: Your MT5 account number, broker server, and password — encrypted at rest with AES-256. Used only to authenticate the EA connection. Never stored in plaintext.
Trading data: Signal logs, trade history, execution timestamps, credit usage, and performance metrics. Tied to your account and used to power your dashboard.
Telegram and Discord tokens: OAuth or session tokens needed to monitor channels on your behalf. Encrypted at rest. We do not read, store, or process messages outside of signal detection.
Usage data: IP addresses, browser type, pages visited, and session duration — collected for security monitoring and product improvement.
Payment data: Handled by Stripe. We do not store card numbers. We receive a transaction ID and subscription status from Stripe.
We use your data to operate PilotFX, process signal executions, display your dashboard, send notifications you've opted into, handle billing, and investigate security incidents.
We do not sell your personal data. We do not use your trading data for any purpose other than operating your account.
We do not collect your broker password, account balance, open or historical positions, or any market data from your MT5 account. We store only what is necessary to authenticate the EA connection and display your dashboard.
Account data is retained while your account is active. On deletion, personal data is removed within 30 days unless required by law.
Signal and trade history is retained per your plan (15 days on Free/Starter, 60 days on Pro, unlimited on Master). Data beyond your window is deleted on a rolling basis.
MT5 credentials are deleted immediately when you disconnect the account or close your PilotFX account.
We use strictly necessary cookies for session authentication. We use analytics cookies to understand product usage. We do not use advertising or tracking cookies.
Disabling non-essential cookies in your browser will not affect your ability to use PilotFX.
We use the following third-party services to operate PilotFX:
Stripe — payment processing. Stripe's privacy policy applies to payment data.
Our hosting provider — cloud infrastructure for servers and databases.
We do not sell or share your data with any third party for marketing purposes.
If you are in the EEA, you have the right to access, correct, delete, or export your data, and to withdraw consent for marketing communications.
To exercise these rights, email privacy@pilotfx.io. We will respond within 30 days.
PilotFX is operated from the Netherlands. If you access the service from outside the EEA, your data may be transferred to and processed in the EEA. We ensure appropriate safeguards are in place for any such transfers.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected users without undue delay, as required by GDPR.
Privacy questions: privacy@pilotfx.io
General support: support@pilotfx.io