Privacy Policy

Last updated: 24 October 2026 · Version 3.0 · Applies to raptorbitai.com and every subdomain operated by RaptorBit AI Research Labs.

1. Who we are and what this document covers

RaptorBit AI Research Labs (“RaptorBit AI”, “we”, “us”) operates the website at raptorbitai.com, the mobile and desktop RaptorBit AI workspace, and the connected support channels. This Privacy Policy explains how we collect, use, store and share personal data about visitors, prospective users and account holders.

This policy complies with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the UK GDPR, the Canadian Personal Information Protection and Electronic Documents Act (“PIPEDA”), the Swiss Federal Act on Data Protection (“FADP”) and, where applicable, the California Consumer Privacy Act (“CCPA”).

If you are a registered RaptorBit AI user, additional data-handling clauses live inside your account agreement. In case of a conflict between this policy and your account agreement, the account agreement controls for the specific data processing it mentions.

2. Categories of personal data we process

• Identity data — full name, date of birth, nationality, government-issued ID for KYC where required by the executing broker.
• Contact data — email address, phone number, mailing address, time-zone.
• Account data — hashed password, two-factor authentication status, API keys, device fingerprint.
• Financial data — bank transfer references, broker account identifier, deposited capital, realised profit, withdrawal history. We do not store full card numbers.
• Trading data — signals accepted or declined, orders placed, overrides applied, dashboard interactions.
• Technical data — IP address, browser type and version, operating system, time-stamped access logs.
• Marketing data — subscription state for our weekly digest, email open and click metrics (aggregated only when possible).

3. Lawful bases under GDPR

Depending on the activity, we rely on one of the following GDPR Article 6 bases:

• Contract (Art. 6(1)(b)) — processing necessary to deliver the RaptorBit AI service to you, including executing trades through the connected broker.
• Legal obligation (Art. 6(1)(c)) — anti-money-laundering checks, tax reporting, regulatory requests, retention duties under financial-services law.
• Legitimate interest (Art. 6(1)(f)) — platform security, fraud prevention, service analytics, direct marketing to existing clients within the scope they signed up for.
• Consent (Art. 6(1)(a)) — non-essential cookies, optional newsletter signups, participation in beta features, press contact.

4. Why we process your data

We process personal data to: (i) deliver and secure the RaptorBit AI workspace, (ii) execute and reconcile trades through the connected broker, (iii) comply with regulatory and tax obligations, (iv) communicate with you about your account and support tickets, (v) prevent fraud and abuse, (vi) improve our AI models with aggregated, de-identified data where possible, (vii) send you product, research and marketing content you have opted into, and (viii) defend our legal interests.

5. Who we share it with (and who we never share it with)

We share personal data with the following categories of recipients, under written contracts that bind them to confidentiality and GDPR-grade data-handling:

• Executing brokers and liquidity providers — strictly to route your orders and reconcile account state.
• Payment processors and banking partners — strictly to move funds in and out of your account.
• Cloud infrastructure providers — hosting, backup, log aggregation. All EU/CA-processed data is stored in EU/CA regions where feasible.
• Email delivery platforms — to send you transactional messages and opted-in newsletters.
• Analytics providers — privacy-respecting, cookie-less analytics only. We do not use advertising cookies.
• Regulators and law enforcement — when legally compelled, and only to the extent legally required.
• Professional advisers — lawyers, auditors, insurers, under confidentiality.

We never sell your personal data to any third party. We never share it with advertising networks or data brokers. We never trade it as part of any commercial arrangement.

6. International transfers

Where we transfer personal data outside the EEA, UK, Switzerland or Canada, we rely on the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or an adequacy decision when one applies. Supplementary measures (encryption, pseudonymisation, access restrictions) are applied as needed following the EDPB recommendations.

7. How long we keep data

• Account and KYC data — for the duration of the account plus 7 years, where required by anti-money-laundering legislation.
• Trading and audit data — minimum 7 years after the last trade, matching financial-services record-keeping rules.
• Marketing data — until you unsubscribe, plus a short archival window for compliance (max 24 months).
• Technical logs — 180 days rolling, except where longer retention is required for an active security investigation.
• Support tickets — 3 years from closure.

8. Your rights

You have the right to: access your personal data, correct inaccuracies, request erasure where legally possible, restrict processing, port your data to another controller, object to processing based on legitimate interest, and withdraw consent at any time without affecting the lawfulness of prior processing. Canadian users have equivalent rights under PIPEDA. California residents have additional CCPA-specific rights, including the right not to be discriminated against for exercising their rights.

Submit any rights request to [email protected]. We will reply within 30 days (extendable to 90 days for complex requests, with notice).

9. Automated decision-making & AI model use

RaptorBit AI uses machine-learning models to generate trading signals, assess risk thresholds and detect fraud. These models produce suggestions that are either (a) acted on only after your explicit consent to activate a strategy, or (b) applied to internal risk and fraud controls on your account. You have the right to request human review of any automated decision that significantly affects you.

We do not use your personal trading data to train publicly released AI models without your opt-in. Where aggregated or de-identified data is used for model improvement, we apply technical measures (hashing, bucketing, noise injection) designed to prevent re-identification.

10. Security measures

We apply layered security controls including: encryption in transit (TLS 1.3), encryption at rest (AES-256), hashed-and-salted password storage (Argon2id), least-privilege access controls, two-factor authentication for all employee access, continuous vulnerability scanning, regular penetration testing by an independent firm, bug-bounty programme, and 24/7 security monitoring. All employees undergo annual security and privacy training.

11. Children

RaptorBit AI is not intended for users under 18 and we do not knowingly collect data from children. If you believe we have collected data from a minor, write to [email protected] and we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. For material changes we send a notification to your registered email at least 14 days before the change takes effect. The current version is always available at raptorbitai.com/privacy-policy.

13. Data Protection Officer & complaints

Our Data Protection Officer is reachable at [email protected]. You may also lodge a complaint with your local supervisory authority — for example, the French CNIL, the Irish DPC, the UK ICO or the Office of the Privacy Commissioner of Canada.

If you have a privacy question that does not require the DPO, start a conversation at our contact page.