Privacy Policy

Who we are

Unitrader is a product of Universal Wallet Ltd, a company registered in England and Wales (Company No. 16695347). We are registered with the Information Commissioner's Office as a data controller (ICO Ref: ZC068643).

Registered address: 128 City Road, London, United Kingdom, EC1V 2NX
Contact: privacy@unitrader.ai

What data we collect and why

Account data (name, email, password hash) — to provide your account. Legal basis: contract performance.

Exchange API keys (Alpaca, Coinbase, OANDA) — to execute trades on your behalf. Legal basis: contract performance. All keys are encrypted at rest. We only use your keys to place trades you authorise. We never transfer funds, withdraw money, or use your keys for any other purpose.

Trading data (trade history, positions, P&L) — to provide the service and improve Unitrader. Legal basis: contract performance and legitimate interests.

Chat and onboarding messages — to personalise your Unitrader experience. Legal basis: contract performance.

Payment data — handled entirely by Stripe. We never store card numbers.

Usage and device data (IP address, browser, device type) — for security and fraud prevention. Legal basis: legitimate interests.

How we share your data

We share data only with these third-party services to operate Unitrader:

• Anthropic — AI analysis via Claude API. Your trade context is sent to generate Unitrader's responses.
• Clerk — authentication and account management.
• Stripe — payment processing.
• Alpaca Markets — stock trade execution. Your API key places orders.
• Coinbase — crypto trade execution. Your API key places orders.
• OANDA — forex trade execution. Your API key places orders.
• Railway — cloud hosting for our backend.
• Supabase — database. Data stored in the EU/UK.
• Resend — transactional email.
• Telegram / Twilio — notifications if you connect these services.

We do not sell your data. We do not use your data for advertising.

How long we keep your data

• Account data: active period + 30 days after deletion
• Trade history and audit logs: 7 years (HMRC requirement)
• Chat history: 12 months
• Payment records: 7 years (legal requirement)

Your rights under UK GDPR

You have the right to access, correct, delete, or export your personal data. To exercise any right, email privacy@unitrader.ai. We respond within 30 days.

Note: trade history and audit logs must be retained for 7 years by law. All other data is deleted within 30 days of a valid erasure request.

Security

We protect your data using encrypted API key storage, HTTPS on all connections, row-level security on all database tables, and automatic session expiry.

If we experience a data breach affecting your personal data, we will notify you and the ICO within 72 hours as required by UK GDPR.

Cookies

We use essential cookies only: authentication cookies (Clerk) and security cookies (CSRF protection). We do not use advertising or tracking cookies.

Children

Unitrader is not intended for users under 18. Contact privacy@unitrader.ai if you believe a child has provided us personal data.

Complaints

If you are unhappy with how we handle your data, you can complain to the ICO: ico.org.uk/make-a-complaint | 0303 123 1113