Privacy Policy

1. Introduction

Welcome to MetaTrader API ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our MetaTrader API service. We are committed to protecting your privacy and ensuring the security of your personal and trading information.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

Account Information

• Email address (collected during registration or via Google OAuth)
• Account profile information (name, profile picture if using OAuth)
• Password (securely hashed, if using email/password authentication)
• API keys generated for your account

Trading Account Information

• MetaTrader account numbers
• MetaTrader account passwords (encrypted at rest)
• Broker server names and connection details
• Platform type (MT4 or MT5)
• Account identifiers and hashes

Usage Data

• API request logs and timestamps
• Connection and disconnection events
• Error logs for troubleshooting and service improvement
• IP addresses and device information
• Feature usage statistics

Payment Information

• Billing information is processed securely through Stripe
• We do not store your full credit card numbers
• Transaction history and subscription status

3. How We Use Your Information

We use the information we collect to:

• Authenticate you and manage your account
• Provide, maintain, and improve our API service
• Connect to your MetaTrader accounts on your behalf
• Validate your access to registered trading accounts
• Process payments and manage subscriptions
• Monitor and analyze service performance and usage patterns
• Detect and prevent fraud, abuse, and security incidents
• Communicate with you about service updates, security alerts, and support
• Comply with legal obligations

4. Data Storage and Security

We take the security of your data seriously and implement industry-standard measures:

• Your data is stored securely with encryption at rest
• Trading account passwords are encrypted and never stored in plain text
• API keys are unique to your account and can be regenerated at any time
• All data transmission uses TLS/SSL encryption (HTTPS)
• We implement access controls and authentication for all systems
• Regular security audits and vulnerability assessments
• Automatic session expiration and secure cookie handling

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services to provide our service:

6. Data Sharing

We do not sell your personal information. We may share data only in the following circumstances:

• With your MetaTrader broker: Necessary for the core functionality of connecting to your trading accounts
• Service providers: Third-party vendors who assist in operating our service (subject to confidentiality agreements)
• Legal requirements: If required by law, court order, or governmental authority
• Protection of rights: To protect our rights, privacy, safety, or property, or that of our users
• Business transfers: In connection with a merger, acquisition, or sale of assets (you would be notified)

7. Data Retention

• Account data is retained while your account is active
• You may request account deletion at any time through your account settings
• Upon deletion, your personal data is removed within 30 days
• Some data may be retained longer if required by law or for legitimate business purposes (e.g., fraud prevention)
• Anonymized, aggregated data may be retained for analytics purposes

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Export: Request a copy of your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing of your data for certain purposes
• Withdraw consent: Revoke OAuth access at any time via your Google account settings

To exercise these rights, please contact us at support@metatraderapi.io or use the account management features in your dashboard.

9. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies: Required for authentication and security
• Preference cookies: Remember your settings and preferences
• Analytics: Understand how users interact with our service

You can control cookies through your browser settings. Disabling essential cookies may affect service functionality.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and compliance with applicable data protection laws.

11. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of significant changes by updating the "Last Updated" date at the top of this policy and, where appropriate, through email notification or a notice on our website.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: