In short: we collect what we need to run Pinelix and to keep you informed about your accounts. We do not sell your data and we do not use advertising trackers.
We never receive your broker or MT5 password.
1. Who is responsible
Pinelix, operated from India ("we"), is responsible for personal data processed through pinelix.com and app.pinelix.com. This policy is written to meet India's Digital Personal Data Protection Act, 2023 and, where it applies to you, the EU/UK General Data Protection Regulation (GDPR).
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Account details | Name, email, password (stored only as a secure hash), or your Google profile name and email if you sign in with Google | To create and secure your account and contact you |
| Trading account data from the EA | MT5 account number, broker server and company, balance, equity, open positions and orders, trade results, EA version | To deliver trades, apply your limits, show your accounts and send alerts |
| Signals and settings | Alerts you send to your webhook, room and account settings, and what happened to each trade | To run the service and show you the signal log |
| Technical data | IP address, browser type, request logs, a fingerprint of the MT5 installation (not your files) | Security, preventing abuse, keeping one terminal per account, fixing problems |
| Notification settings | Telegram bot token and chat ID, if you set them up | To send you the alerts you asked for |
| Billing data | Plan, invoices, payment status (card details stay with the payment provider) | To bill you and meet tax and accounting rules |
3. Legal basis
We process your data to perform our contract with you (running Pinelix), with your consent (for example Telegram alerts, which you can turn off), for our legitimate interests in keeping the service secure and improving it, and to meet legal obligations such as tax records.
4. Who processes data for us
We use a small number of providers, each bound to protect your data and use it only for us:
- Railway: application hosting and database (data centre in Southeast Asia);
- Cloudflare: domain name service and email forwarding for pinelix.com;
- Resend: sending account and alert emails;
- Google: sign-in with Google, only if you choose it;
- Telegram: delivering alerts, only if you set it up;
- Our payment provider: processing payments, once billing is active.
Some of these providers process data outside India. Where that happens, we rely on the safeguards they offer, such as standard contractual clauses. We do not sell or rent personal data, and we only share it with authorities when the law requires it.
5. Cookies
The portal uses one essential cookie to keep you signed in. Your browser may store your light/dark theme choice locally. We do not use advertising or cross-site tracking cookies, so there is nothing to opt out of.
6. How long we keep data
- Account and settings: while your account is open, and up to 30 days after you close it.
- Signal and trade logs: up to 12 months, so you can review your history, unless you delete them sooner.
- Billing records: as long as tax law requires (in India, generally 8 years).
- Security logs: up to 90 days.
7. Security
Connections are encrypted (HTTPS). Passwords are hashed, and EA sessions use secrets that can be revoked from the portal. Access to production systems is limited. No system is perfectly secure: if a breach affects your data, we will tell you and the authorities as the law requires.
8. Your rights
You can ask to:
- see a summary of the personal data we hold about you;
- correct or update it (most of it you can change in the portal);
- delete your account and data, subject to what we must keep by law;
- withdraw consent you gave, for example for alerts;
- nominate someone to act for you if you die or become unable to;
- complain to us, and then to the Data Protection Board of India or your local data protection authority.
Write to support@pinelix.com. We reply within 30 days.
9. Grievance contact
For questions or complaints about your personal data, including under the Digital Personal Data Protection Act, write to our grievance contact at support@pinelix.com. We reply within 30 days.
10. Children
Pinelix is for adults. We do not knowingly collect data from anyone under 18.
11. Changes
We will post any update here with a new date, and email you about important changes before they apply.