PRIVACY POLICY
This Policy explains how Uviqo Technologies Private Limited ("pilotX", "we") handles personal data when you use trypilotx.com and the pilotX service. We act as the data fiduciary for this data.
Important notice
- No guaranteed returns. pilotX does not guarantee any profit or return. Past, demo or example results do not predict future results.
- Trading involves risk, and losses are part of trading. You can lose some or all of the money in your trading account, and losses can be larger than planned.
- We never collect or hold your trading funds. Your money stays in your own broker account at all times. pilotX does not receive, pool or move it, and cannot withdraw it.
- You stay in control. pilotX's software automates trading in your own broker account according to the risk settings you choose during onboarding. You can change them, pause or stop at any time from the platform.
1. Data we collect
| What | Examples | Why |
|---|---|---|
| Account | Name, email, hashed password, email verification, terms version accepted | Create and secure your account |
| Settings | Risk per trade, plan choice, pause/activation history, acknowledgements | Run automation as you instructed |
| Broker connection | Broker, server, masked login, account type and currency, balance, equity, positions, orders, deals | Check eligibility, size and place trades, show your activity |
| Trading activity | Decisions, trade intents, orders, broker confirmations, results | Execute, reconcile, report, support and audit |
| Billing (paid plans) | Plan, invoices, amounts, GST details, payment status and provider references | Billing, tax and accounting |
| Technical | Session cookie, IP address (short-term, for rate limiting and security), request logs | Security, abuse prevention, operating the service |
| Support | Messages you send us | Answering you |
We do not store your broker trading password. It goes to our broker-connectivity provider (MetaApi) to connect your account. We never ask for withdrawal access. Card and UPI details are handled by Razorpay, not by pilotX.
2. Cookies
We use only a strictly necessary login session cookie. We do not use advertising or analytics trackers.
3. Who we share data with (processors)
| Provider | Purpose | Location |
|---|---|---|
| MetaApi | Connecting to and trading in your broker account | London (connection region) |
| Hostinger | Application hosting, database, transactional email | United Kingdom |
| Backblaze B2 | Encrypted backups | European Union (EU Central) |
| Cloudflare | Domain, DNS and network security | Global |
| Razorpay | Payments (paid plans) | India |
| Your broker (e.g. VT Markets) | Executing the trades you authorised | Per your broker |
The AI that analyses the market receives market data only, not your personal data. We do not sell personal data. We disclose data where required by law or to protect our rights and users.
4. Where your data is stored
Our servers are in the United Kingdom, and some providers process data outside India as listed above. Data is encrypted in transit, backups are encrypted, and access is restricted to authorised staff.
5. How long we keep it
- Account profile and support data: while your account is open. After closure we delete or anonymise it within 90 days, unless we must keep it longer for legal obligations, fraud or security investigations, or disputes.
- Operational and security logs: 180 days.
- Financial, billing, invoice and tax records: 8 financial years, or longer where the law or ongoing proceedings require.
- Trade, execution and audit evidence: only for the legal, accounting, fraud-prevention, dispute and audit purposes set out in our retention schedule.
- Broker credentials: held in encrypted form only while your account is connected and they are needed to provide the service. Deleted promptly after you disconnect or close your account; encrypted backups containing them expire on their normal backup cycle.
6. Your rights
Under the Digital Personal Data Protection Act 2023 you can ask to access, correct, complete or erase your data, withdraw consent, and nominate someone to exercise your rights. Email [email protected] from your registered address. We aim to respond within 30 calendar days. Erasure may be limited where we must keep records by law (for example invoices). You may complain to our Grievance Officer, and then to the Data Protection Board of India.
7. Security
Passwords are hashed. Sessions and verification tokens are stored hashed. Connections use TLS. Production systems use least-privilege access, encrypted off-site backups and monitoring. No system is perfectly secure. We will notify you and the authorities of a personal-data breach as the law requires.
8. Children
pilotX is for adults (18+). We do not knowingly collect children's data.
9. Changes
We will email you about material changes before they take effect.
10. Contact and Grievance Officer
Grievance Officer: Vipin Vinitha, [email protected], Uviqo Technologies Private Limited, C/O Mohammed Ubais A A, A Square Building, Edathala P.O., Ernakulam, Kerala 683561, India. Support: [email protected].