VXVANTORYX
Sign InGet Started
Terms of ServicePrivacy PolicyRisk DisclosureDisclaimerRefund PolicyCookie PolicyFAQSupport Desk

Privacy & Data Protection Policy

How Vantoryx collects, protects, stores, and handles your account data, trade logs, and telemetry.

Last UpdatedAugust 2026

Legal Review Notice:This document represents Vantoryx's commercial operating policy and platform terms. Specific statutory provisions, regional disclaimers, and privacy protections are periodically reviewed and updated to maintain strict compliance.

1. Commitment to User Privacy

At Vantoryx (operated by Vantoryx Technologies), we take the confidentiality of your trading journals, simulated strategies, and personal information seriously. We do not sell your personal data or your trade logs to third-party marketing brokers or data brokers.

2. Information We Collect & Process

  • Account Credentials: Email address, argon2id-hashed password, display name, and avatar URL.
  • Trading & Simulation Records: Simulated orders, fill executions, trade journal entries, emotional/mistake tags, strategy playbooks, historical backtest configurations, and challenge phase metrics.
  • Trading DNA & Behavioral Profiling: Algorithmic performance metrics, session win rates, drawdown duration, and behavioral archetype classifications derived automatically from your closed trade history.
  • Uploaded Media: Candlestick chart setup screenshots stored in secure object storage.
  • Billing Identifiers: Subscription status, Paddle customer identifiers, and transaction events. Payment details (card numbers, CVVs) are processed exclusively by Paddle as Merchant of Record and never touch Vantoryx servers.
  • Security Audit Telemetry: IP addresses, request user agents, session creation timestamps, and authentication logs recorded for intrusion detection and security auditing.
  • Encrypted Integration Tokens: Optional read-only broker API tokens, stored using AES-256-GCM encryption.

3. Purpose of Processing & Lawful Basis

Collected information is processed under the following legal bases:

  • Contract Performance: Providing terminal workspace access, automated trade journaling, challenge evaluation telemetry, and customer support.
  • Legitimate Interests: Intrusion prevention, security monitoring, server health optimization, and preventing plan entitlement abuse.
  • Legal Compliance: Maintaining financial transaction records required by billing regulations.

4. Third-Party Sub-Processors

We share data with trusted infrastructure providers solely to operate the Service:

Paddle: Merchant of Record for payment processing, tax compliance, and billing management.

Neon PostgreSQL: Primary managed cloud database provider for account and application state storage.

Cloudflare R2 / S3: Secure object storage provider for user-uploaded chart screenshots.

Resend: Transactional email infrastructure provider for email verification and password resets.

Market Data Partners: Third-party market data feed providers (market queries are anonymized server-side).

5. Data Retention, Data Export & Account Erasure

You maintain full control of your data:

  • Data Export: You can export your complete trading history archive in JSON format at any time via Settings → Data & Account.
  • Account Deletion: Initiating account deletion permanently removes your profile, simulated accounts, trade logs, playbooks, and screenshots from our active database. Security audit logs and billing invoice history are retained for the legally required record-keeping period.

6. Your Privacy Rights

Depending on your jurisdiction (including EU/EEA GDPR, UK GDPR, California CCPA/CPRA, or South Africa POPIA), you may have rights to access, correct, port, or request deletion of your personal data, or object to certain processing.

To exercise any privacy rights, contact our Data Protection Office at support@vantoryx.cowith the subject "Privacy Inquiry".