Privacy Policy

This policy applies to personal data processed across Merini’s content hub (merini.com) and trading app (trade.merini.com). Merini is a provider of charting/analysis software and market and educational information, not a licensed financial investment firm.

① Registration and account data — email and the identifiers for the broker account you connect yourself (e.g. MT5 login/server, cTrader account). ② Authentication data — passwords are stored only in hashed/encrypted form, never in plaintext. ③ Usage and technical data — IP address, device and browser information, sessions, and preferences such as language and currency. ④ The positions, orders, and trade history retrieved from your broker to display the service.

When you connect a broker account for live trading, we store the following depending on the connection method. ① MT5 — your broker password is stored in reversibly-encrypted form (KMS) and is used only to log in to the broker terminal. ② cTrader — OAuth delegated tokens (access and refresh) are stored encrypted (KMS); your broker login password is never stored. In both cases you can disconnect at any time, upon which the stored credentials/tokens are discarded. Merini uses these credentials only to route your orders and read your account per your instructions.

To authenticate users and secure accounts, provide market data, charts, and trading features, offer customer support, improve the service, detect abuse and security threats, and meet applicable legal obligations. We do not use your data for marketing or advertising without consent.

We use an httpOnly authentication cookie to keep you signed in, and browser local storage for conveniences such as language, currency, and chart settings. We do not use third-party advertising or tracking cookies.

To the extent needed to run the service, we exchange data with cloud infrastructure (server and database hosting), CDN and security (traffic delivery and protection), email delivery, and the broker or trading platform you connect yourself (such as cTrader). Merini does not sell personal data.

As a global service, your data may be processed on servers in regions such as South Korea and Japan. Where data is transferred, we apply protections consistent with this policy and applicable law.

We apply transport encryption (TLS), one-way password hashing, encryption of sensitive data at rest, access controls, and audit logging. No system can guarantee absolute security, however, and you should also safeguard your own account credentials.

We delete personal data without undue delay once its purpose is fulfilled or when you close your account, except where law requires us to retain certain information, which we keep securely for the required period and then delete.

You may request access to, correction or deletion of, restriction of processing of, or withdrawal of consent for your personal data at any time, via the contact channel below. Merini does not knowingly collect personal data from children under 14.

For privacy inquiries, contact support@merini.com. If this policy changes, we will post the changes and their effective date on this page.