Privacy Policy.

1. What we collect

• Identity and contact data — full name, email address, phone number.
• Account data — the Genni AI username you choose, and your website password stored only as a salted one-way hash.
• Trading link data — your MetaTrader account ID, your broker server, and your MetaTrader password (see section 3).
• Trading activity data — balances, equity, margin, open and closed positions, and performance read from your linked Trading Account in order to display your dashboard.
• Subscription and billing data — the services you subscribe to, billing periods and payment status. Card details, where payments are introduced, are handled by the payment provider and are not stored by us.
• Technical data — IP address, browser and device information, and security logs such as sign-in attempts.
• Correspondence — messages you send us through the contact form or by email.

2. Why we process it

• To create and administer your account and authenticate you.
• To connect to your Trading Account and operate the Service you have subscribed to.
• To display your trading information, performance and bot status in the dashboard.
• To manage subscriptions, invoicing and any agreed profit-sharing calculation.
• To provide support and respond to enquiries.
• To detect, investigate and prevent fraud, abuse and unauthorised access.
• To comply with legal, regulatory and tax obligations.

We do not sell your personal data, and we do not use your trading data to advertise to you.

3. MetaTrader credentials

Your MetaTrader password is treated as a high-sensitivity secret. Specifically:

• It is transmitted only over an encrypted (TLS) connection, submitted from the sign-up form.
• It is encrypted at rest using authenticated encryption, with the encryption key held in a dedicated key-management service separate from the application database.
• It is never written to application logs, analytics, error reports or backups in plain text.
• It is never displayed in the dashboard, and is never included in any API response. The dashboard shows only that a credential exists.
• Decryption occurs only in the isolated component that connects to your broker, and every such access is logged.
• It is deleted when you unlink the account or close your Genni AI account, subject to section 6.

You can revoke our access at any time by changing your MetaTrader password with your broker. We will never ask you for this password by phone, email, chat or any messaging app.

4. Legal basis and consent

Where the Digital Personal Data Protection Act, 2023 applies, we process personal data on the basis of the consent you give at registration, and for the legitimate uses permitted under that Act. Where other data-protection laws apply to you, we rely on the performance of our contract with you, our legitimate interests in operating and securing the Services, and compliance with legal obligations.

You may withdraw consent at any time by contacting us; withdrawal does not affect processing carried out before withdrawal, and may mean we can no longer provide the Services.

5. Who we share it with

• Hosting and infrastructure providers that run our systems under contract.
• Payment providers, where payments are enabled, for the purpose of processing them.
• Your broker, to the extent required to connect to the Trading Account you asked us to link.
• Professional advisers, regulators or law-enforcement authorities, where we are legally required to disclose.

Processors act on our instructions and are bound by confidentiality and security obligations. Where data is transferred across borders, we apply the safeguards required by applicable law.

6. How long we keep it

We keep personal data for as long as your account is active, and afterwards only for as long as needed to meet legal, tax, accounting or dispute-resolution obligations. MetaTrader credentials are deleted promptly when the link is removed or the account is closed. Security and transaction logs are retained for a limited period for fraud prevention and audit.

7. Security

We apply technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit and at rest, one-way hashing of website passwords, key management separated from application data, least-privilege access controls, audit logging, and rate limiting on authentication endpoints. No system is completely secure; you also play a part by choosing a strong, unique website password and keeping your devices secure.

If a personal-data breach occurs that is likely to affect you, we will notify you and the relevant authority as required by applicable law.

8. Your rights

Subject to applicable law, you may request access to the personal data we hold about you, correction of inaccurate data, erasure of data, information about with whom it has been shared, withdrawal of consent, and nomination of another person to exercise your rights in the event of death or incapacity. To exercise any of these, contact us using the details in section 12. We may need to verify your identity before acting.

9. Cookies

We use strictly necessary cookies and equivalent browser storage to keep you signed in and to protect the site against abuse. We do not use advertising cookies. If analytics cookies are introduced in future, we will ask for your consent first and update this policy.

10. Children

The Services are not directed at, and must not be used by, anyone under 18. We do not knowingly collect personal data from children. If we learn that we have, we will delete it.

11. Changes

We may update this policy. The revised version takes effect when published here, and the “last updated” date will change. Material changes will be notified where reasonably practicable.

12. Contact and grievances

For privacy questions or to exercise your rights, contact support@genniworld.com. Complaints may be addressed to our Grievance Officer as described in section 22 of the Terms.