Privacy Policy

• Sign-in identity. When you sign in with Google, we receive your name, email address and profile picture through Supabase Auth. If you sign in by email link instead, we store your email address.
• Profile details you choose to add, such as a display name, leaderboard alias, timezone, trading experience, style, risk appetite and goals, and optional social handles (Telegram, YouTube, X/Twitter).
• Exness affiliate data. If you link an Exness account under our partner code, we receive and store your Exness client identifier, account and order records, trading volume and rebate/reward figures from Exness’s partner API. When you start Exness verification, we send your account email address (which may be the one from your Google sign-in) to Exness to check whether your Exness account is registered under our partner code.
• MT5 account credentials and analytics. If you connect a MetaTrader 5 account, you provide its login, server and read-only investor password. Our server encrypts the password immediately as a sealed box (libsodium, X25519 + XSalsa20-Poly1305) that only our sync machine can open; our database stores only the ciphertext, and it is erased automatically when the sync request completes or fails. We store the account analytics computed from that sync (trade history statistics and behaviour reports).
• Credits and rewards: credit balances and transactions, referrals, unlocks, notifications and subscriptions to scheduled plans.
• Usage and AI request logs. When you use AI features we record each model call (feature, model, token counts, cost, timing and outcome) against your account, and store AI-generated content produced for you.

• To sign you in and operate your account.
• To verify your Exness account and calculate rebates, rewards and credits.
• To produce your trading analytics, reports and AI-generated coaching.
• To meter AI usage, prevent abuse and keep costs within limits.
• To secure, maintain and improve the Service.

We do not sell your personal data and do not use it for advertising.

• Supabase — database, authentication and serverless functions.
• Vercel — website hosting, the AI Gateway that routes model requests, and sandboxed code execution.
• Google — Google sign-in, Gemini AI models (reached through the Vercel AI Gateway), and Google Cloud, which hosts the MT5 sync machine and its decryption key.
• Exness — source of affiliate, account, volume and rebate data.

Data sent to AI models consists of market data plus what is needed for your request: your trading and account statistics for coaching and behaviour reports, and the trading style, risk appetite and timeframe you choose for custom plans. We do not send your name or email address to AI models. We may also disclose data where required by law.

Sovereign Strategist’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in data (name, email, profile picture) to create and identify your account, to show your profile picture where described below, and, if you start Exness verification, to send your email address to Exness to confirm your affiliation. We do not use it for advertising or sell it.

Your public profile and leaderboard entry are visible to other signed-in users: your leaderboard alias, profile picture, tier, reward points and any Telegram, X/Twitter or YouTube handles you add. Profile pictures are stored in a public storage bucket, so anyone with the image link can view them. The leaderboard also shows trading lot volumes against each alias.

Our Exness partner data includes every client registered under our partner code, including people who have never used this Service. We receive these records from Exness to calculate rebates and to build the leaderboard, which shows trading volume against a pseudonymous alias, not a name or email address. If you are an Exness client under our code and want your data removed from the leaderboard, or want to object to this processing, email hi@soverign.app.

• Account and profile data is kept while your account is active.
• A sealed MT5 password stays on its sync request until the sync machine processes it or the request expires. This can take longer while the sync machine is offline. It is erased when the request completes, fails or expires.
• News analysis and custom trading plans expire and are deleted automatically. Coaching reports, signal explanations and scheduled plans are kept until your account is deleted.
• AI model-call records are deleted after 30 days.
• Sandboxed code-run records are deleted after 365 days.
• To delete your account, email hi@soverign.app. We handle deletion requests manually. Deleting your account removes your profile and the records linked to it.

You may request access to, correction of, deletion of, or an export of your personal data, and you may object to or restrict its processing, by emailing hi@soverign.app. You can disconnect a linked MT5 account at any time from Settings.

Data is protected by encryption in transit, row-level access controls in the database, and sealed-box encryption for MT5 passwords. No system is perfectly secure, and we cannot guarantee absolute security.

We use only the authentication session cookies set by Supabase to keep you signed in. We do not use analytics or advertising cookies. Your browser’s local storage holds a few interface preferences (such as theme and onboarding status) and cached AI content on your device.

The Service is not intended for anyone under 18, and we do not knowingly collect data from them.

Our providers may process data outside the United Arab Emirates, including in the United States and the European Union. Where we transfer data, we rely on our providers’ contractual and security safeguards.

We process personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

We may update this policy. We will change the “Last updated” date above and, for material changes, notify you in the Service.

Privacy requests and questions: hi@soverign.app.