1. What we collect
Account details: your email address, username and password. We store passwords only as a one-way hash; we can't read them.
Waitlist and plan details: the accounts you plan to run, the affiliate code you joined with and the dates you joined or updated your plan.
Affiliate details: your name, email, username, chosen referral code, and any platform, audience size and link you choose to share.
Orders and payments: what you bought, delivery details and payment status. Card details are handled by our payment processor; we never see or store your full card number.
Trading data, once accounts are live: account activity, trades, balances, payouts and the information needed to check our rules.
Technical data: the information your browser sends when you visit (such as IP address, device and browser type) and the session cookie that keeps you logged in.
2. Why we use it
To run your account and deliver what you signed up for or bought (contract). To credit affiliates for referrals and pay commission (contract). To prevent fraud, rule abuse and duplicate identities, and to keep the service secure (legitimate interests). To meet legal, tax and accounting obligations (legal obligation). To email you about launch, your accounts and changes to our terms (contract and legitimate interests). Any marketing beyond that will be opt-in, and you can unsubscribe at any time.
3. Who we share it with
Service providers who process data for us: website hosting and data storage (Vercel), payment processing (Stripe), and, once live, trading platform, market data and email providers. They may only use your data to provide their service to us.
Affiliates see a limited view of the traders who used their code: a masked email address, join date and planned accounts. They never see your full email, password or payment details.
Authorities, regulators or professional advisers when required by law, to enforce our terms or to protect our rights. A buyer or successor if the business is sold or restructured.
We don't sell your personal data.
4. International transfers
Our providers may process data outside your country, including in the United States. Where that happens we rely on appropriate safeguards such as standard contractual clauses or equivalent protections.
5. Cookies and local storage
We use strictly necessary cookies to keep you logged in (separate ones for trader, partner and admin logins). We use your browser's local storage to remember your plan, bag and affiliate code between visits. We don't currently use advertising or analytics cookies; if we add them, we'll ask for consent first where required.
6. How long we keep it
We keep account data for as long as your account is open, and afterwards for as long as needed to resolve disputes, prevent abuse and meet legal and tax requirements (typically up to 6 years for financial records). Waitlist data with no account activity is deleted on request or when no longer needed.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict certain uses, and to withdraw consent. To exercise any of these, email support@zerocuttrading.com. You can also complain to your local data protection authority (in the UK, the Information Commissioner's Office).
8. Security
We use encrypted connections, hashed passwords, signed session cookies and access controls to protect your data. No system is perfectly secure, so please use a strong, unique password.
9. Children
The service is not for anyone under 18. We don't knowingly collect data from children.
10. Changes and contact
We'll post updates to this policy here with a new effective date. Questions or requests: support@zerocuttrading.com.