Privacy policy

Stating this first because it is the part that matters most for a trading product:

• We never collect your broker credentials. The connection to your trading account is made by the MetaTrader 5 terminal you control. The system does not ask for your broker login, and there is nowhere in it for those credentials to be stored.
• We do not take custody of funds. We hold no money and have no ability to withdraw from your account.

• Account data — the email address and display name you register with, and a cryptographic hash of your password. Passwords are hashed and never stored in a recoverable form.
• Trading data — the positions, orders, risk decisions and account state produced by your use of the system. This is what makes the audit trail and the console possible, and it is what the performance fee is calculated from.
• Billing data — subscription status and invoice history. Card details are handled by our payment provider and do not reach our systems.
• Operational logs — technical records used to diagnose faults and keep the service secure.

To provide and operate the service, to authenticate you, to calculate and collect fees, to maintain the audit trail that makes trading decisions reconstructable, to diagnose faults, and to comply with legal obligations.

We do not sell personal data. We share it only with service providers who process it on our behalf to deliver the service:

• a payment provider, to process subscription and performance-fee billing;
• a large-language-model provider, which receives market data and trading context needed to produce a proposal;
• infrastructure and hosting providers that run the service;
• where required, competent authorities acting under applicable law.

We set a signed session cookie when you sign in. It exists to keep you authenticated and expires automatically. We do not use advertising or cross-site tracking cookies.

Account and trading records are retained while your account is active and for as long afterwards as is needed to meet legal, accounting and audit obligations. Operational logs are kept for a shorter period.

Depending on where you live, you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to object to certain processing. Contact support@helios.trade to exercise them.

Note that records forming part of the trading audit trail may need to be retained even after an account is closed, where a legal or regulatory obligation requires it.

Passwords are hashed, sessions are signed and time-limited, and backend credentials are held server-side and never exposed to the browser. No system is perfectly secure; we will notify affected users of a breach where the law requires it.

Privacy questions: support@helios.trade.