Condara Legal

Privacy Policy

Last updated: 11 June 2026

Condara ("we", "us", "our") respects your privacy. This Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it.

1. Data We Collect

  • Account data: name, email address, hashed password, display preferences, and authentication identifiers from third-party sign-in providers (e.g. Google).
  • Subscription & billing data: plan tier, billing status, transaction identifiers, and invoices. Card details are processed by our payment provider and are never stored on Condara servers.
  • Usage data: pages viewed, features used, signals interacted with, watchlists, journal entries, and AI prompts you submit.
  • Technical data: IP address, device type, browser, operating system, language, time-zone, and approximate location derived from IP.
  • Optional uploads: trading statements (MT5/CSV) and chart screenshots you choose to upload for analysis. These are processed on demand and not retained beyond what is needed to return the result.

2. How We Use Your Data

  • Provide, secure, and improve the Service and your account.
  • Process subscriptions and handle billing.
  • Generate market analysis, signals, and AI-assisted insights.
  • Send transactional emails (account, security, billing). Marketing emails only with consent.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal, accounting, and regulatory obligations.

3. Legal Bases (where GDPR applies)

We process personal data on the basis of (a) performance of a contract with you, (b) our legitimate interests in operating and securing the Service, (c) your consent (where required, e.g. for non-essential cookies and marketing), and (d) compliance with legal obligations.

4. Analytics & Cookies

We use first-party and limited third-party analytics to understand how the Service is used and to improve performance. Essential cookies are required for authentication and security. Non-essential analytics and preference cookies are only set with your consent, where required by law. You can clear cookies through your browser at any time.

5. AI Processing

When you use AI features (predictions, chart analysis, MT5 coaching, chat), the content you submit is sent to our AI providers solely to generate the requested response. We do not use your prompts or uploaded files to train third-party foundation models. See our AI Transparency Statement for details.

6. Data Sharing

We share personal data only with: (a) infrastructure and database providers operating the Service under data-processing agreements; (b) payment processors handling subscriptions; (c) email and analytics providers acting on our instructions; and (d) authorities where required by law. We do not sell personal data.

7. International Transfers

Personal data may be processed outside your country of residence. Where we transfer data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

8. Retention

We retain account data for as long as your account is active, and thereafter only as long as needed to comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account at any time.

9. Security

We implement reasonable technical and organisational measures including encryption in transit, hashed credentials, role-based access controls, audit logging, and least-privilege database policies. No system is perfectly secure; you are responsible for protecting your password and access devices.

10. Your Rights

Subject to applicable law, you have rights to access, correct, export, restrict, or delete your personal data, withdraw consent, and lodge a complaint with your local supervisory authority. To exercise these rights, contact our legal team.

11. Children

The Service is not directed to children under 18 and we do not knowingly collect personal data from them.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified through the Service or by email.