Privacy Policy

1. Data Controller

InvicTrade FZ-LLC ("InvicTrade", "we"), headquartered in Dubai, United Arab Emirates, is the data controller for personal data collected through this Platform.

Data Protection Officer (DPO): privacy@invictrade.com

2. Data We Collect

We collect: registration data (name, email, country, language); usage data (pages visited, IP address, device/browser type); transaction data (subscription history via Whop — we do not store card data); portfolio data (positions voluntarily entered by users); support communications.

3. Purpose and Legal Basis

We process your data to: (i) provide the Service (basis: contract performance); (ii) improve and secure the Platform (basis: legitimate interest); (iii) send service communications (basis: consent or legitimate interest); (iv) comply with legal obligations.

We do not sell, rent, or commercially share your personal data with third parties for marketing purposes.

🇺🇸 USA (CCPA/CPRA — California): California residents have the right to: (i) know what personal data we collect; (ii) request deletion; (iii) opt out of the sale of personal data (we do not sell data). To exercise these rights: privacy@invictrade.com.

🇪🇺 EUROPEAN UNION / 🇬🇧 UK (GDPR / UK GDPR): Processing of data from EU and UK residents complies with the General Data Protection Regulation. Data subjects have the rights of: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and objection (Art. 21). For transfers of EU/UK personal data to the UAE, we apply Standard Contractual Clauses (SCCs) approved by the European Commission as an adequate safeguard.

🇧🇷 BRAZIL (LGPD): Processing of data from Brazilian users complies with the Lei Geral de Proteção de Dados (Law No. 13,709/2018). Applicable legal bases include contract performance (Art. 7, V), legitimate interest (Art. 7, IX), and legal obligation (Art. 7, II). Brazilian users may exercise LGPD rights (Art. 18) at: privacy@invictrade.com.

🇦🇷 ARGENTINA (PDPA): Processing of data from Argentine users complies with the Personal Data Protection Law (Law 25,326). Data subjects have rights of access, rectification, and deletion.

4. Data Sharing

We share data only with: (i) Whop (payment processing); (ii) cloud infrastructure providers (secure hosting); (iii) competent authorities when required by law.

We do not share data with advertisers, brokers, fund managers, or any third party for commercial purposes.

5. Data Retention

We retain your data while your account is active and for up to 5 years after account closure for audit and legal purposes. Portfolio data is deleted within 90 days of user request.

6. Security

We implement TLS 1.3 encryption in transit, bcrypt password hashing, secure dedicated server storage with restricted access, and continuous monitoring. Passwords and API keys are never stored in plain text.

7. Cookies

We use only strictly necessary cookies for authentication and session management. We do not use third-party tracking cookies, advertising pixels, or behavioral analytics tools.

8. Contact

To exercise your rights or for questions: privacy@invictrade.com Response time: up to 15 business days (or the legal deadline in your jurisdiction).