The short version#
- We store an email, your orders, your simulated trading records, and a payout wallet address.
- We collect no identity documents — there is no KYC to leak.
- We don't sell personal data. Processors get only what they need to work.
What we store#
| Data | Why |
|---|---|
| Email + password hash (or Google OAuth id) | your login |
| Display name (optional) | your profile |
| Orders + payment references | what you bought; Helio tx / PayPal capture ids |
| Simulated trading records | orders, fills, positions, equity history, breach evidence |
| Payout wallet address + payout records | paying you; on-chain tx signatures |
| Affiliate data (if you join) | clicks, conversions, commissions |
| Technical logs (IP, user agent) | rate limiting, abuse and fraud prevention |
Trading records are also the product's honesty mechanism — every fill keeps the market snapshot it was quoted against (see the fill policy).
What we never collect#
- No identity documents, selfies, or address proofs — no KYC exists here.
- No card numbers or bank details: card/PayPal data stays with PayPal; crypto payments settle on-chain via Helio. We see references, not credentials.
- No advertising trackers on the product pages at launch.
How it's used#
To operate your accounts, compute and enforce the published rules, process payments and payouts, prevent fraud and simulation abuse (conduct-rule screening such as deployer-wallet checks and markout monitoring), send transactional email (account issued, breach, payout status), and comply with law. We do not sell or rent personal data, and we don't send marketing email without your consent.
Retention#
- Account and trading records: kept while your account exists, then up to 24 months for dispute and fraud defense.
- Order/payout records: kept as required for accounting and tax law.
- High-resolution price ticks: about 7 days; equity snapshots: about 30 days at full resolution.
- Technical logs: about 90 days.
Security#
Transport encryption everywhere, row-level access controls on user data, trading state writable only by the engine's service credentials, admin actions audit-logged, and payout signing keys kept off our servers entirely (payouts are signed from an offline operator machine). No system is perfect; we design so that a web-tier compromise cannot move treasury funds.
Your rights#
Email support@fullportcapital.co from your account email to access, correct, export, or delete your data. Deletion removes personal identifiers; records we must keep (paid orders, payout ledgers, fraud evidence) are retained in de-identified or legally-required form.
Controller#
Placeholder — pending counsel review
Data controller identity and contact address to be inserted with the operating entity (see the terms, §1), including EU/UK representative details if required.
Changes#
Material changes to this policy will be posted here with an updated date, and announced in-product for logged-in users.