Information we collect
We collect only what we need to run XauLab:
- account details: your name, email address, a secure hash of your password (never the password itself), and your Google profile name and email if you sign in with Google;
- your work: strategies, backtest and generator reports, deployments, and support conversations;
- billing records: plans, credit transactions and payment status (card and UPI details are handled by our payment provider, not stored by us);
- broker connection details: MT5 account number, server, account type, balance and trade history needed to run and monitor your strategies;
- security and usage data: sign-in times, masked or hashed network addresses, browser type, and security events, used to protect accounts and prevent abuse.
How we use it
To provide and secure the service, run your backtests and deployments, send account, security and trade alert emails, process payments, answer support requests, prevent fraud and free-credit abuse, and meet legal obligations. We do not sell your personal information.
How long we keep it
We keep your data while your account is open. Billing and security records may be kept longer where the law or fraud prevention requires it. Backups are kept for a limited period and then deleted.
Your choices
You can update your name, reset your password, sign out of all devices, disconnect your broker account and turn off alert emails in your workspace. To request a copy or deletion of your data, contact support. Under India's Digital Personal Data Protection Act, 2023 you may also have the right to correct your data and to raise a grievance with us.
Security
We use encrypted connections, hashed passwords, secure session cookies and access controls. No online service is perfectly secure, so please use a strong, unique password and never share it, including with support.
Changes
We may update this policy. The date at the top shows when it last changed.