Legal
Privacy policy
What we collect, why we collect it, and what we do not collect.
Last updated: 24 August 2026
Your MetaTrader 5 login
We collect it, and we should say so plainly rather than leave it to be discovered. The terminal that trades your account runs on our infrastructure and has to sign in to your broker, so the login you give us during setup is stored.
It is encrypted before it is written down, under a key that is held in the server environment and cannot be read or changed through any web interface — including by an administrator of this service. It is decrypted for one purpose, logging your terminal in, and is used for nothing else. It is never shown back to you or to anyone, never logged, and never sent to a third party.
What that login can do is bounded by your broker, not by us: it places and manages orders. It carries no withdrawal rights, and we could not move money out of your account with it if we wanted to. If you close your account we delete it along with the rest of your data.
What we do not collect
Stating this first because it is the part that matters most for a trading product:
- We do not take custody of funds. We hold no money and have no ability to withdraw from your account.
- We never collect card or bank details. There is no card processing on this service at all — payment is USDT sent from a wallet you control — so there is nothing of that kind for us to hold or to lose.
- We do not sell or share your data with advertisers, data brokers or anyone else for their own purposes.
What we collect
- Account data — the email address and display name you register with, and a cryptographic hash of your password. Passwords are hashed and never stored in a recoverable form.
- Trading data — the positions, orders, risk decisions and account state produced by your use of the system. This is what makes the audit trail and the console possible, and it is what the performance fee is calculated from.
- Billing data — subscription status and invoice history. Card details are handled by our payment provider and do not reach our systems.
- Operational logs — technical records used to diagnose faults and keep the service secure.
Why we process it
To provide and operate the service, to authenticate you, to calculate and collect fees, to maintain the audit trail that makes trading decisions reconstructable, to diagnose faults, and to comply with legal obligations.
Who it is shared with
We do not sell personal data. We share it only with service providers who process it on our behalf to deliver the service:
- a payment provider, to process subscription and performance-fee billing;
- a large-language-model provider, which receives market data and trading context needed to produce a proposal;
- infrastructure and hosting providers that run the service;
- where required, competent authorities acting under applicable law.
Cookies
We set a signed session cookie when you sign in. It exists to keep you authenticated and expires automatically. We do not use advertising or cross-site tracking cookies.
Retention
Account and trading records are retained while your account is active and for as long afterwards as is needed to meet legal, accounting and audit obligations. Operational logs are kept for a shorter period.
Your rights
Depending on where you live, you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to object to certain processing. Contact support@pukpikai.space to exercise them.
Note that records forming part of the trading audit trail may need to be retained even after an account is closed, where a legal or regulatory obligation requires it.
Security
Passwords are hashed, sessions are signed and time-limited, and backend credentials are held server-side and never exposed to the browser. No system is perfectly secure; we will notify affected users of a breach where the law requires it.
Contact
Privacy questions: support@pukpikai.space.