Privacy Policy

Data Controller

The data controller responsible for your personal data is:

This Privacy Policy explains what personal data we collect when you use the Morphic AI platform, why we collect it, and the rights available to you under the EU General Data Protection Regulation (GDPR).

Data We Collect

Registration data

Your email address and a securely hashed password. We never store your password in plain text.

Integration data

The exchange API key you connect to the Service. Only trade-only keys without withdrawal permissions are accepted; keys are stored encrypted and are never visible in plain text to our staff during normal operation.

Trading history & balances

Trade records and account balance data retrieved via your connected API key, used exclusively to operate your strategies and to calculate the performance fee owed for a given billing period.

Technical data

IP address and basic request logs, collected to secure the platform, prevent abuse such as spam or denial-of-service attempts, and maintain your login session.

Purpose & Legal Basis for Processing

We process your data to provide the Service under the contract formed by these Terms (Art. 6(1)(b) GDPR), to comply with legal obligations such as accounting and fraud-prevention requirements (Art. 6(1)(c)), and, for security logging, on the basis of our legitimate interest in keeping the platform safe and available (Art. 6(1)(f)).

Data Protection & Storage

Your data is stored on secured servers located within the European Union. Access is restricted to personnel who require it to operate the Service, and API keys and passwords are stored encrypted / hashed at rest. We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

Data Sharing

We share data only with service providers strictly necessary to run the platform (e.g. hosting infrastructure located in the EU), each bound by data-processing agreements consistent with GDPR, or where disclosure is required by law or a valid legal request from a competent authority.

Data Retention

We retain account and trading data for as long as your account is active, and for a limited period afterward where required for accounting, tax, or dispute-resolution purposes. Technical security logs are retained for a limited period sufficient for abuse detection before being deleted or anonymized.

Your Rights (GDPR)

Under the GDPR, you have the right to request access to the personal data we hold about you, to request correction of inaccurate data, to request full deletion of your account and associated data, to request a portable copy of your data, and to object to or request restriction of certain processing. To exercise any of these rights, contact us at info@morphicai-trade.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit) or your local supervisory authority.

Cookies

The Service uses a small number of strictly necessary cookies to operate. Details are set out in our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email before taking effect.

Contact

For any privacy-related question, contact info@morphicai-trade.com.