Privacy Notice

1. Controller and contact

Aura Capital Trading Ltd is the controller of the personal data described in this notice. Our company number and registered office are shown below. We do not currently appoint a data protection officer. Contact hello@proptection.app for privacy requests.

2. Personal data we collect

Depending on how you use PROPTECTION, we collect your email address and sign-in identifier; workspace/account data such as selected rule profile, account values, trade inputs, saved checks and imported history; pilot or waitlist details such as platform, trading style and account stage; support-message content; and, only if you opt in, a pseudonymous session identifier and first-party events such as pages viewed and product interactions.

We do not ask for broker passwords or trading-platform credentials. Do not send them to us. We do not intentionally collect special-category personal data. Some trade or account data may be commercially sensitive, so we treat it with appropriate care.

3. Why we use data and our legal bases

• To provide, secure and improve a signed-in workspace, we use sign-in identity and workspace data to perform our contract with you and for our legitimate interests in security and service administration.
• To respond to a pilot, waitlist or support request, we use contact and request details for our legitimate interests in responding to your request and operating the beta.
• For optional product analytics, we use pseudonymous session and event data only with your consent.
• To comply with legal obligations, resolve disputes and protect rights, we use relevant records where a legal obligation or our legitimate interests apply.

4. Recipients and international transfers

We use service providers that process data for us: Cloudflare/Sites for website hosting and database infrastructure, OpenAI/ChatGPT when you choose its sign-in route, IONOS for support email, and providers needed to maintain the service. Yahoo Finance supplies reference market data; we do not send it your account or workspace data.

Our providers may process information outside the UK. Where a restricted transfer applies, we use an adequacy regulation, UK International Data Transfer Agreement/addendum, or another lawful safeguard as required by law. We may also disclose information where required by law or necessary to establish, exercise or defend legal claims.

5. Retention and your rights

We retain signed-in workspaces until you delete them or they have been inactive for 24 months. We retain pilot and waitlist records for 12 months, consented analytics events for 90 days, and support correspondence for up to 24 months. We may retain limited information longer where necessary for legal claims, fraud/security prevention or a legal obligation. Browser-local information remains on your device until you clear it or use browser controls.

Subject to applicable law, you can ask us for access, correction, deletion, restriction, portability or objection to processing, and can withdraw analytics consent at any time using Privacy settings. You can delete a signed-in workspace through the service. For other requests, email hello@proptection.app. You may complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113. We may need to verify your identity before acting.

6. Security, children and updates

We use proportionate technical and organisational measures, but no online service can guarantee absolute security. PROPTECTION is not intended for anyone under 18. We may update this notice before changing our processing; the current version and effective date will be published here.