Privacy Policy

EpochOMS Ltd is the data controller for personal data processed through this platform. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018.

1. Information We Collect

• Account & identity details you provide at sign-up (name, email, date of birth, address, country of residence)
• Account credentials (username and a securely hashed password)
• Simulated ("paper") portfolio, strategy and activity data generated within the platform
• Session data, IP address and access logs (used for security and the UK-only access check)
• Communication and notification preferences; billing details where you subscribe

2. How We Use Your Information

We use your data to operate and secure the platform: to authenticate you, run your simulated portfolios and the AI agent, provide analytics and reporting, process subscription payments, send notifications you have opted into, verify eligibility (including the UK-only access check), and meet legal obligations. Our lawful bases are performance of a contract, legitimate interests, consent (for optional notifications) and legal obligation.

3. Automated Processing

The AI agent generates trading decisions and signals within the paper/simulation environment only. Because this operates on simulated, non-real portfolios, it does not produce a legal or similarly significant effect on you. We do not use solely-automated decision-making to manage real money or assets. You may contact us to query, object to, or request human review of any automated processing.

4. Data Storage & Retention

Data is stored on secure servers (hosted by Hostinger) with encrypted backups. Passwords are stored only as salted cryptographic hashes — never in plaintext. We retain personal data for as long as your account is active and for any period required to meet legal, accounting or security obligations, after which it is deleted or anonymised.

5. Third-Party Processors

We use the following service providers, each with its own privacy terms. Some are located outside the UK; where personal data is transferred internationally we rely on appropriate safeguards (such as UK adequacy regulations or standard contractual clauses):

• Hostinger — hosting and platform email
• Anthropic — AI processing that powers the agent and analysis
• Stripe — subscription payment processing
• Alpaca / Interactive Brokers — paper-account market routing (and, if you self-direct live, your own broker connection)
• Alpha Vantage / Twelve Data — market data
• Telegram — optional notification delivery
• Backblaze B2 — encrypted off-site backups
• Sentry — error monitoring and diagnostics

We do not sell or rent your personal data. We may share anonymised, aggregated data for research, and may disclose data where required by law.

6. Cookies

EpochOMS uses a session cookie to maintain your authenticated state and a cookie to record acceptance of our Terms. We do not use advertising or cross-site tracking cookies.

7. Your Rights

Under the UK GDPR you have the right to access, rectify, erase, restrict or port your personal data, and to object to certain processing. To exercise these rights, or to complain, contact us at support@epochoms.com. You also have the right to complain to the Information Commissioner's Office (ICO).

8. Contact

For privacy enquiries, contact: support@epochoms.com