1. Data Categories
Traders ID stores the following broad categories of data:
- Identity data: name, email, password hash, Trader ID.
- Profile data: bio, country, social links, avatar, preferences.
- Verification data: KYC documents, selfies, review notes, decision logs.
- Trading data: statements, snapshots, performance metrics you upload or authorize.
- Activity data: login events, device fingerprint, IP, timezone, access logs.
- Order data: software subscriptions and payment records.
2. Storage Locations
- MySQL database (Aiven): structured data — accounts, profiles, KYC metadata, logs, payments.
- Cloudflare R2: encrypted files — statements, KYC documents, avatars.
- Application servers (Render): transient processing; no permanent user data is stored on disk.
- Frontend (Vercel): static assets only; no personal user data is stored on Vercel.
3. Encryption
Sensitive files (KYC documents, statements) are encrypted at rest with AES-256 before being written to storage. All traffic between your device and our backend uses TLS. Passwords are stored using industry-standard one-way hashing — we never store passwords in plain text.
4. Access Control
Access to production data is restricted to authorized personnel and is logged. Admin actions (KYC approvals, account changes) are recorded in audit logs. Files in R2 are private and served only via short-lived signed URLs (typically 1 hour) generated for authenticated requests.
5. Retention Periods
- Account & profile data: until account deletion + up to 30 days (backup cycle).
- KYC documents & decisions: typically up to 3 years after last activity, per legal retention norms.
- Activity logs: up to 12 months.
- Payment & order records: up to 7 years where required by tax/accounting law.
6. Deletion Process
You may request deletion of your account and personal data from your dashboard or by emailing us. Once processed:
- Profile, avatar, and non-legally-required data are deleted.
- KYC and trading data are deleted once the legal retention period expires.
- Backups are purged on their normal rotation cycle (typically 30 days).
We may retain limited data where required to comply with the law, resolve disputes, or prevent fraud.
7. Backups
We take periodic encrypted backups to protect against data loss. Backups are stored in the same regions as primary storage and are subject to the same access controls.
8. Sub-processors
We rely on the following sub-processors to deliver the Service: Cloudflare R2, Render, Aiven MySQL, Vercel, our email delivery provider, and payment gateways. Each is contractually required to protect your data.
9. Contact
For data-related questions:
Email: support@mytradingid.com
Location: India