Version 2026-10-20
ORIGIN4TRADE BEHAVIORAL MARKETS - FZCO, Premises No. DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates, is responsible for the personal data described here. You can contact us at contact@origin4trade.com.
We collect only what the service needs. The table shows what, why, on what legal basis and for how long.
| Data | What it includes | Why we use it | Legal basis | How long |
|---|---|---|---|---|
| Account and profile | Name or alias, email, answers to the trader profile | Create your account, sign you in, adapt the cooling-off pause to your profile | Contract | While the account is open, then deleted (section 7) |
| Trading account data | MT5 account number, server, broker, positions and trading activity | Monitor, warn you and, if you switch it on, close positions | Contract; consent for automatic closing | While the account is connected |
| Behavior measures and block history | Patterns detected, alerts, blocks | Show your protection history and run the protection | Contract | While the account is open, then deleted |
| Consent records | Which consents you gave or withdrew, when (the time of our server), the version of the text and the account concerned | Prove what you agreed to | Legitimate interest: proving consent and defending legal claims | 5 years after you delete your account |
| Emails | Your address and a log of the messages we sent | Sign-in links, alerts, trial notices | Contract; legitimate interest | While the account is open |
| Invite data | Invite code | Give partner access | Contract | While the account is open |
| Purchases | Email, payment reference, amount, currency, date, status | Activate your plan, handle refunds, keep accounts | Contract; legal obligation | 7 years |
| Waiting list | Email and the time you agreed | Send one email when the VIP plan opens | Consent | Until VIP opens, or 12 months if it does not; removed on request |
| Visit statistics | Page-view events (landing page viewed, registration started, Founding Member Launch Pass page viewed and its buy button clicked). If you accept the visit-statistics cookie, each event also carries the random identifier of that cookie, so we can count unique visitors. If you click to request PRO access while signed in, that click is linked to your account | See where visitors leave the registration, and which plan requests come in | Consent, for the cookie; legitimate interest, for the counts of page views | 12 months. The cookie lasts 6 months. The link to your account is deleted with the account |
| Technical data | Device and browser information, security logs, and the approximate country worked out from your IP address (not stored) | Run and secure the service | Legitimate interest | Only in the logs of our hosting providers, for as long as they keep them |
Your trading password is sent over encrypted connections to our server, which passes it to our connectivity provider MetaApi. We do not store it in our database or in our logs. MetaApi keeps it to maintain the connection until you disconnect the account or delete your profile, even if monitoring is paused. To avoid sending MetaApi credentials it has already rejected, a one-way hash of those credentials is kept only in the memory of our server for up to one hour, and is never written to a database or a file.
We do not sell your data. These providers process data on our behalf:
| Provider | What for | Data |
|---|---|---|
| Render | Hosts the backend and the database | All service data |
| Vercel | Hosts the website | Visit and technical data |
| MetaApi | Connects to your trading account | Credentials, account number, server, positions |
| Resend | Sends our emails | Your email address and the message |
| Payment processor | Takes payments, when billing opens | Email and payment details, held by the processor |
If you joined through an invitation from a partner organisation, it receives aggregated, anonymised results only. It receives information about you individually only if you choose to allow it. We may disclose data when the law requires it.
Origin4Trade operates from the United Arab Emirates. Personal data collected from users located in the European Economic Area (EEA) and the United Kingdom (UK) may be transferred to, and processed by, infrastructure sub-processors (including Render, Vercel, MetaApi, and Resend) located in third countries. Transfers outside the EEA or UK are safeguarded through standard contractual clauses (SCCs) approved by the European Commission, the UK International Data Transfer Addendum, or adequacy decisions.
The agreements we have with each provider are listed on the Sub-processors page. Where an agreement with a provider is still being completed, that page says so.
We use two cookies of our own, and no cookies from third parties. The cookie o4t_consent remembers your choice about cookies. The site needs it to work. The cookie o4t_vid is a random identifier that we set only if you accept the visit-statistics cookie. It lets us count unique visitors and see where they leave the registration. Each lasts 6 months.
We ask for your choice, and we place the optional cookie, only for visitors in the European Union, the rest of the European Economic Area, the United Kingdom and Switzerland. For visitors elsewhere, we do not place it. You can change or withdraw your choice at any time with Cookie settings in the footer, or by deleting the cookies in your browser.
To work, the service also keeps five items in your browser's local storage: a random user identifier, your sign-in token, your name (to greet you), whether you finished the registration, and the invitation code if you came through an invitation link. They are removed when you sign out or delete your account.
Visiting the website does not store anything in your browser, except the invitation code when you arrive through an invitation link, and your choice about cookies if you answer the notice. The fonts are served from our own servers, so your browser does not contact third parties to display the site.
To show the right notice, our hosting provider tells our website the approximate country of your visit, worked out from your IP address. We use it only for that and we do not store it.
You can delete your account from your dashboard. We then remove your trading accounts from our provider and delete your account data, profile answers, behavior measures, alerts, blocks, trades, email log and invite codes.
We keep only what the law or a possible claim requires: purchase records for 7 years, and records of your consents for 5 years after you leave. If you are on the waiting list, write to us and we will remove you.
Depending on where you live, you may have the right to access, correct or delete your data, to restrict or object to its use, to receive a copy, to withdraw consent at any time, and to complain to your data protection authority.
You can download your data (including your consents and purchases) and delete your account from your dashboard, or write to us. We answer within one month.
Data travels over encrypted connections. You sign in with a single-use link sent to your email. The database is not reachable from the internet.
You must be 18 or over to use the service. We do not knowingly collect data from anyone younger.
We will update this policy as the service evolves. The version number above will change, and we will notify material changes in the app and by email.
Questions or requests: contact@origin4trade.com. You may also complain to your data protection authority.
We are established in the United Arab Emirates. The law of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, applies to our processing of personal data. This section adds to the rest of this policy.
We process your personal data on the basis of your explicit consent. Where the law allows processing without consent, we also process it when this is necessary to perform our contract with you, or to take steps at your request before the contract is made; to comply with our legal obligations under the laws of the United Arab Emirates; or to establish, exercise or defend legal claims. Where the table in section 2 names legitimate interest as the basis, for users in the United Arab Emirates the basis is your consent, given when you register, or one of the other cases described here.
Your personal data may be transferred to and processed outside the United Arab Emirates by the providers listed in section 4. We transfer data only where the Personal Data Protection Law allows it, and we put in place with those providers the safeguards it requires, such as contractual commitments on how they protect your data.
Under the law of the United Arab Emirates you have the right to obtain information about how your data is processed; to ask for your data to be transferred to another controller; to have inaccurate or incomplete data corrected; to ask for your data to be deleted; to restrict the processing of your data; to object to its processing at any time, under the conditions set by law; and to withdraw your consent at any time.
You can download your data and delete your account from your dashboard, switch off automatic closing at any time, or write to us.
Our service analyses your trading behavior by automated means. By default it only sends you warnings. If you choose to switch on automatic closing, the service closes positions on your account automatically when predefined risk parameters are detected. You can object to this automated processing, or switch it off, at any time in your dashboard.
You can complain to the UAE Data Office, the authority that supervises data protection in the United Arab Emirates. We would appreciate the chance to resolve it first: write to contact@origin4trade.com.
Questions: contact@origin4trade.com