Privacy Policy

This Privacy Policy describes what data is collected when using the Service, how it is processed and protected, and what rights the User has.

The data controller is LuckyFinder FZ-LLC, registered in Dubai (UAE), which determines the purposes and means of processing personal data.

We collect::

• Email address
• API keys (encrypted)
• Trading preferences
• Technical logs
• Service usage data (login date and time, account activity, system technical events)
• Device and connection information (browser type, operating system, IP address, country/region)

We do not collect biometric data, health data, political views, religion or other sensitive information.

Personal data is processed exclusively for specific purposes and within the legal grounds provided by applicable UAE legislation.

• Creating and administering the User's account
• Ensuring functioning and providing Service capabilities
• Maintaining security, preventing fraud and technical incidents
• Performance analysis and platform improvement (in anonymized form)
• Communication with Users regarding account and service operation
• Sending informational and marketing notifications (only with the User's separate consent)

Data processing is carried out based on the following legal grounds:

• Performance of contract between User and Company (provision of SaaS services)
• User consent to processing of certain categories of data
• Legitimate interests of the Company (maintaining security, improving service)

Personal data may be transferred to third parties only to the extent necessary for Service functioning.

• Hosting providers and infrastructure operators
• IT service and monitoring system providers
• Payment providers (when users make payments)
• Analytics and performance diagnostics services (in anonymized form)

Personal data is not sold or transferred to third parties for marketing purposes.

Data may be processed on servers located outside the UAE, provided an appropriate level of protection is ensured.

The Company takes reasonable technical and organizational measures to protect data during international transfer.

Personal data is stored no longer than necessary for the purposes of its processing.

Account data is stored until the account is deleted by the User.

Technical logs may be stored for a limited period to ensure system security and diagnostics.

After account deletion, some data may be retained in anonymized or archived form, if required by law or for incident resolution.

We apply modern security measures

Data encryption used

Only authorized employees and service providers who need such data to perform their tasks have access to personal data.

Despite the security measures taken, no method of data transmission or storage can guarantee absolute security.

The User has the right to send a request to exercise their rights regarding personal data.

• Right to access your data
• Right to correct inaccurate or outdated information
• Right to delete account
• Right to restrict data processing in cases provided by law
• Right to object to data processing
• Right to data portability

A request to exercise rights can be sent to the Company's data support service email.

The User has the right to file a complaint with the competent data protection authority in the UAE.

The Site may use cookies and similar technologies to ensure proper operation and improve user experience.

Cookies may be used for authentication, saving settings, traffic analysis and security.

The User can manage cookies through browser settings. Disabling cookies may limit Service functionality.

The Service is not intended for persons under 18, and the Company does not knowingly collect children's data.

If such data was provided, the User must notify the Company for its deletion.

The Company may periodically update this Privacy Policy.

The User will be notified of changes by publishing the updated version on the site.

Continued use of the Service after changes means acceptance of new terms.