Privacy Policy
What we collect and why, how we protect it, and the rights you have.
Scope
This policy applies to personal data processed across Merini’s content hub (merini.com), demo trading (demo.merini.com), and trading app (trade.merini.com). Merini is a provider of charting/analysis software and market and educational information, not a licensed financial investment firm.
Information we collect
① Registration and account data — email and the identifiers for the broker account you connect yourself (e.g. cTrader account number and broker name). ② Authentication data — passwords are stored only in hashed/encrypted form, never in plaintext. ③ Usage and technical data — IP address, device and browser information, sessions, and preferences such as language and currency. ④ The positions, orders, and trade history retrieved from your broker to display the service. ⑤ Information you create or connect yourself — demo trading records (positions and trade history in your virtual account), trade notes, community posts and profile (which are published publicly), support messages, your optional answer to the one-question survey about why you signed up, and the Telegram chat identifier you connect to receive alerts. ⑥ If you subscribe to our newsletter, your email address, language, and the page where you subscribed. ⑦ Your country, determined from your IP address.
Broker connection credentials
When you connect a cTrader account for live trading, we store only the delegated-authorization (OAuth) tokens (access and refresh) that you approve on the cTrader sign-in page, encrypted with KMS. Merini never receives or stores your broker login password. You can disconnect in the app at any time; when you do, the stored tokens are discarded immediately and Merini’s connection to that account is closed. Deleting your account also deletes the tokens. Merini uses these tokens only to route your orders and read your account per your instructions.
How we use it
To authenticate users and secure accounts, provide market data, charts, and trading features, offer customer support, improve the service, detect abuse and security threats, and meet applicable legal obligations. We do not use your data for marketing or advertising without consent.
Cookies and local storage
We use an httpOnly authentication cookie to keep you signed in, and browser local storage for conveniences such as language, currency, and chart settings. We do not use third-party advertising or tracking cookies.
Third-party processors
To the extent needed to run the service, we entrust processing to, or exchange data with: Amazon Web Services (server and database hosting), Cloudflare (content delivery, security, and visit statistics), Zoho (email delivery), Umami (visit statistics), Anthropic (AI Indicator requests, and the record and note of trades you ask to have reviewed), Google (translation of community posts you choose to translate), Telegram (delivery of alert messages, if you connect it, and operational notices to the operator — such as new sign-ups, first demo trades and sign-up survey answers, including email, IP address, referral source and country), and the broker or trading platform you connect yourself (such as cTrader). Visit statistics do not use cookies. Merini does not sell personal data.
International processing
As a global service, your data may be processed on servers in regions such as South Korea and Japan. Where data is transferred, we apply protections consistent with this policy and applicable law.
Security
We apply transport encryption (TLS), one-way password hashing, encryption of sensitive data at rest, access controls, and audit logging. No system can guarantee absolute security, however, and you should also safeguard your own account credentials.
Retention and deletion
We delete personal data without undue delay once its purpose is fulfilled or when you close your account, except where law requires us to retain certain information, which we keep securely for the required period and then delete.
Your rights
You may request access to, correction or deletion of, restriction of processing of, or withdrawal of consent for your personal data at any time, via the contact channel below. Merini does not knowingly collect personal data from children under 14.
Contact and changes
For privacy inquiries, contact support@merini.com. If this policy changes, we will post the changes and their effective date on this page.
※ This is a draft prepared during product readiness; the final version will be confirmed after professional (legal) review. Last updated: September 18, 2026 · Contact: support@merini.com