Privacy Policy
Last updated: 1 May 2025
Zephgain Inc. ("Zephgain", "we", "us" or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website zephgain-au.live and use our AI trading platform (collectively, the "Service"). Please read this policy carefully. If you do not agree with its terms, please discontinue use of the Service.
1. Information We Collect
1.1 Information You Provide Directly
When you create an account or interact with the Service, we may collect:
- Identity Data: full name, date of birth.
- Contact Data: email address, phone number, residential address.
- Financial Data: broker API keys (read-only/execution), investment preferences, and risk tolerance settings. We never store your full broker credentials or payment card numbers.
- Profile Data: username, trading strategy preferences, notification settings.
- Communications: messages you send via support channels or email.
1.2 Information Collected Automatically
When you use the Service, we automatically collect certain technical information:
- IP address, browser type and version, operating system.
- Pages visited, features used, time spent, and clickstream data.
- Device identifiers and mobile advertising IDs (where applicable).
- Cookie and tracking technology data (see our Cookie Policy).
1.3 Information from Third Parties
We may receive information about you from third parties such as identity verification providers, fraud prevention services, and analytics partners. We combine this with data we hold to improve accuracy and security.
2. How We Use Your Information
We use the information collected to:
- Create and manage your account and provide the Service.
- Process and execute trading signals and automated orders on connected brokers.
- Personalise your experience and provide relevant market insights.
- Send transactional emails (account confirmations, trading notifications, security alerts).
- Send marketing communications where you have consented or where permitted by law.
- Detect, investigate, and prevent fraudulent or unlawful activities.
- Comply with legal and regulatory obligations.
- Improve, test, and develop new Service features using aggregated and anonymised data.
3. Legal Basis for Processing (EEA/UK Users)
If you are located in the European Economic Area or the United Kingdom, we process your personal data based on the following legal grounds:
- Contract performance: to provide the Service you signed up for.
- Legitimate interests: fraud prevention, security, product improvement.
- Legal obligation: compliance with financial regulations and tax law.
- Consent: marketing communications and non-essential cookies (which you can withdraw at any time).
4. Sharing Your Information
We do not sell your personal data. We may share it with:
- Service providers: cloud hosting, email delivery, analytics, and customer support providers contractually bound to protect your data.
- Connected brokers and exchanges: only the minimal API instructions required to execute your configured strategy.
- Legal authorities: when required by law, court order, or to protect our rights.
- Business transfers: in connection with a merger, acquisition, or sale of assets, provided the buyer honours this policy.
5. International Data Transfers
Zephgain operates globally. Your data may be transferred and processed in countries other than yours, including the United States and European Union member states. Where required, we use European Commission-approved Standard Contractual Clauses to safeguard cross-border transfers.
6. Data Retention
We retain your personal data as long as your account is active or as needed to provide the Service. After account closure, we keep certain data for up to seven years to comply with financial regulatory requirements. Aggregated and anonymised analytics data may be retained indefinitely.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access a copy of the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict certain processing activities.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time without affecting prior processing.
To exercise any of these rights, contact us at . We will respond within 30 days.
8. Security
We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, multi-factor authentication, role-based access controls, and annual third-party penetration testing. Despite these measures, no system is completely secure. We encourage you to use a strong, unique password and enable two-factor authentication.
9. Cookies
We use cookies and similar tracking technologies to operate and improve the Service. For full details, please see our Cookie Policy.
10. Children's Privacy
The Service is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by posting a notice on our website or via email. Continued use of the Service after the effective date of any update constitutes acceptance of the revised policy.