Privacy Policy

Effective 2026-04-29

What we collect

• Account data — email, password hash, full name, country, date of birth.
• KYC documents — government ID, selfie, proof of address. Stored encrypted at rest, accessible only to compliance staff with audit logging.
• Trading data — orders, simulated balances, drawdown events. Generated by your activity on the platform.
• Payment data — incoming USDT transactions on the wallet you fund. Outgoing TRC20 transactions to your payout wallet.
• Operational telemetry — request logs, IP, user agent. Used for security and fraud prevention only.

What we don't do

• We do not sell your data. Ever.
• We do not use your data for ad targeting. We do not run ads.
• We do not share KYC documents with third parties except to satisfy a legal obligation backed by a court order or equivalent.

Sub-processors

• Supabase — auth, database, file storage. Hosted in EU.
• Brevo — transactional email delivery.
• TwelveData — market data feed (no PII transmitted).
• TronGrid — public TRC20 chain reads (no PII transmitted).

Your rights

You can request export of your data, correction of inaccuracies, or deletion of your account at any time. KYC documents must be retained for the duration of applicable AML statutes (typically 5 years from last activity) before deletion. Email privacy@wick.pacifikai.com.

Cookies

We use first-party cookies strictly necessary for authentication. We do not use analytics, advertising, or third-party tracking cookies.

See also: Terms of Service · Risk Disclosure