Privacy Policy

1. Introduction

This Privacy Policy explains how Gadel ("Gadel", "we", "us", or "our") collects, uses, shares, and protects your personal data when you use Gadel, including our website, waitlist, dashboard, and trade-automation service (the "Service"). It also explains your rights.

We are the controller of the personal data described here. By using the Service you agree to this Policy. If you do not agree, please do not use the Service. This Policy should be read together with our Terms and Conditions.

2. The data we collect

We collect only what we need to run the Service. The categories are:

a. Information you give us

• Account and identity data: your name, email address, and a hashed version of your password. We store passwords only as a secure one-way hash, never in plain text, and we cannot see your password.
• Waitlist data: if you join the waitlist, the name and email you submit, and optionally your primary broker, trading experience, and any notes you add.
• Broker connection credentials: to place trades on your behalf, we store the credentials you provide for the broker accounts you connect. Depending on the broker this may include an API token, or a broker login, password, and server. These credentials are encrypted at rest and are used only to connect to the broker account you asked us to connect. See Section 7 on security.
• Telegram connection data: if you connect Telegram to copy signals, we store the technical credentials and session needed to maintain that connection, also encrypted at rest. We do not read or store your personal Telegram messages beyond what is required to detect and execute the trading signals in the channels you choose to monitor.
• Payout data: if you use referral payouts, the cryptocurrency wallet address you provide so we can send your reward and so you do not have to re-enter it.
• Support and communications: the content of messages you send us.

b. Information we generate about your use of the Service

• Trading and configuration data: the channels, rules, groups, tools, and broker accounts you set up; the trades placed through the Service; and account status and balance snapshots retrieved from your broker to show you in the dashboard.
• Billing data: your plan, subscription and invoice status, add-ons, and referral reward ledger. Card or payment-instrument details are handled by our payment providers, not by us. See Section 5.

c. Information collected automatically

• Technical and device data: IP address, browser type, operating system, device type, and similar technical identifiers.
• Usage and diagnostic data: pages viewed, actions taken, timestamps, and error and performance logs, used to operate, secure, and improve the Service.
• Cookies and similar technologies: see Section 8.

We do not intentionally collect special-category data (such as health, political, or biometric data), and you should not send it to us.

3. How we use your data

We use your personal data to:

• create and manage your account and authenticate you;
• provide the Service, including connecting to your broker accounts, executing the signals, rules, strategies, tools, and trades you configure, and showing your activity, balances, and results in the dashboard;
• operate the waitlist and let you know when access opens;
• process subscriptions, add-ons, invoices, and referral rewards and payouts;
• communicate with you about your account, security, transactions, and important changes to the Service or these policies (these are service messages you cannot fully opt out of while you hold an account);
• send marketing or product updates where you have not opted out, and you can unsubscribe at any time;
• secure the Service, detect and prevent fraud, abuse, and unauthorized access, and enforce our Terms;
• maintain, debug, analyze, and improve the Service;
• comply with legal obligations and respond to lawful requests.

Legal bases (where the GDPR or a similar law applies). We rely on: performance of our contract with you (to provide the Service you signed up for); your consent (for example for optional marketing and non-essential cookies, which you can withdraw); our legitimate interests (to secure, run, and improve the Service and prevent abuse, balanced against your rights); and compliance with legal obligations.

4. Automated processing

The core function of the Service is to execute trades automatically based on the signals, rules, and strategies you set up. This automated execution acts on your instructions and configuration, and you remain responsible for the settings you choose and the trades that result, as described in the Terms and Conditions. We do not use your personal data to make decisions that produce legal or similarly significant effects about you outside of carrying out the trading automation you have configured.

5. How we share your data, and our processors

We do not sell your personal data. We share it only as needed to run the Service:

• Brokers and exchanges you connect (such as MetaTrader 5 brokers, Deriv, IQ Option, and others). We send trade instructions and connection credentials to the broker account you chose. Your relationship with that broker, and any funds there, are governed by the broker's own terms and privacy policy.
• Payment providers, who process your subscription and add-on payments. They receive the data needed to take payment and handle their own compliance.
• Referral-payout provider, who sends your cryptocurrency reward to the wallet address you supplied.
• Infrastructure and hosting providers, who host our servers, databases, and, where applicable, the trading terminal we run on your behalf.
• Email and communications providers, who deliver our transactional and waitlist emails.
• Analytics providers, who help us understand and improve usage. See Section 8.
• Waitlist storage. Waitlist entries may be stored in a spreadsheet service we use to manage the pre-launch list.
• Professional advisers, authorities, and successors. We may disclose data to our lawyers, accountants, or insurers; to comply with the law, a court order, or a lawful request, or to protect our rights, users, or the public; and to a buyer or successor if we merge, are acquired, or sell assets, subject to this Policy.

These third parties are our processors or independent controllers as the case may be. Where they act as our processors, we require them by contract to use your data only for the tasks we specify and to protect it. We are not responsible for the independent privacy practices of a broker, exchange, or payment or blockchain network that you separately transact with.

6. International data transfers

We and our providers may process your data in countries other than where you live, including our country of establishment (Nigeria) and the countries where our providers operate. Those countries may have different data-protection laws. Where required, we take steps to ensure an appropriate level of protection for such transfers, for example by using providers that offer recognized transfer safeguards. By using the Service you understand that your data may be processed internationally as described here.

7. Security

We take the security of your data seriously, and we apply particular care to sensitive credentials:

• Broker and Telegram credentials are encrypted at rest, and passwords are stored only as secure one-way hashes.
• We restrict internal access, use encrypted connections for data in transit, and apply technical and organizational measures appropriate to the risk.
• Non-custodial by design. We never hold or control your trading funds. Your money stays in your own broker or exchange account, which reduces the impact of any incident on your funds.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your own credentials confidential, using a strong, unique password, and securing the devices and email you use to access the Service and your brokers. If we become aware of a data breach that affects you, we will notify you and any regulator as required by law.

8. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand usage. Some are essential for the Service to work; others are analytics or performance cookies that we use to improve it. Where required by law, we ask for your consent to non-essential cookies. You can control or block cookies through your browser settings, but blocking essential cookies may stop parts of the Service from working. We may use third-party analytics that set their own cookies and collect usage and device data on our behalf.

9. Data retention

We keep your personal data only as long as we need it:

• Account data for as long as your account is active, and for a reasonable period afterward to comply with legal, tax, accounting, dispute-resolution, and fraud-prevention obligations.
• Broker and Telegram credentials for as long as the connection exists, and we delete or disable them when you remove the connection or close your account, subject to any short operational or backup window.
• Billing, invoice, and referral-reward records for as long as required by tax and financial-record laws, which is typically several years, because they are a financial audit trail.
• Unverified or inactive accounts may be deleted automatically after a short period, as described in the Service.
• Waitlist entries until launch outreach is complete or you ask to be removed.

When we no longer need data, we delete or anonymize it. Some records in secure backups may persist for a limited time before being overwritten.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct inaccurate or incomplete data;
• deleteyour data ("right to erasure"), subject to records we must keep by law;
• restrict or object to certain processing, including direct marketing, which you can opt out of at any time;
• portability, to receive certain data in a portable format;
• withdraw consent where we rely on it, without affecting past processing;
• complain to your local data-protection authority.

To exercise any right, contact us using Section 12. We will respond within the time the law requires. We may need to verify your identity first, and some data may be retained where we have a legal basis or obligation to keep it.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Contact

For any privacy question, or to exercise your rights, contact us at contact@gadel.app, or through the contact details on gadel.app. If we have a data protection representative or officer, their details will be listed here.

13. Changes to this Policy

We may update this Policy from time to time. When we do, we will change the "Last updated" date and, for material changes, take reasonable steps to notify you, for example by posting a notice in the Service or by email. Your continued use of the Service after a change takes effect means you accept the updated Policy.