Privacy Policy

This Privacy Policy explains how WDR Consulting, Inc. ("AI Go Futures Trader," "we," "us") collects, uses, stores, and shares personal information when you use our websites, dashboards, and trade-copying services (the "Service"). It applies together with our Terms of Service. By using the Service you consent to the practices described here.

1. Information we collect

Information you provide directly:

• Account registration: name, email address, phone number, and a password (stored as a salted hash — we never store plain-text passwords).
• Identity verification (KYC): images of your government-issued ID (front and back) and a selfie, plus the fields extracted from them (name, date of birth, document number, expiry, address). These are used to verify that you are who you say you are before copy trading is enabled.
• Trading credentials: brokerage and copier usernames and passwords you choose to save so our team can configure your follower connections. These are encrypted at rest with keys held by us and are used only for copier configuration (see Section 4).
• Copy configuration: requested copy ratios, account preferences, risk settings, and messaging preferences.
• Support and communications: messages, feedback, and attachments you send us.

Information collected automatically or from connected services:

• Trading account data: account names and numbers, balances, positions, orders, fills, profit and loss, and copier status pulled from the copier engine and brokers you connect, used to operate the dashboard, licensing, and risk automation.
• Trade capture images:chart screenshots generated by our automation (with P&L values verified and stamped on the image) tied to the leader account's sessions.
• Billing data: subscription status, license quantities, and payment events processed by Stripe. Card numbers are handled by Stripe and never touch our servers.
• Technical data: log data, IP addresses, browser type, device information, and usage events used for security, debugging, and abuse prevention.

2. How we use information

• Provide, operate, and secure the Service, including signal routing, copy configuration, licensing enforcement, and dashboards.
• Verify your identity and eligibility (live accounts, funding minimums, ratio caps) before enabling automation.
• Configure and maintain your follower connections in the copier using the credentials you save.
• Process subscriptions and account licenses, prevent fraud, and enforce payment-based access.
• Send transactional communications: verification emails, billing notices, end-of-day account status messages (if opted in), and service alerts.
• Monitor risk automation (profit locks, watchdogs) and produce verified trade captures.
• Comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use your KYC documents or trading credentials for marketing.

3. How identity verification is processed

KYC images you upload are analyzed by our own verification pipeline, which runs vision-model OCR and face-match checks on infrastructure we operate. Extracted fields and scores are stored with your account to record the verification decision. Verification images and results are retained while your account is active so we do not need to re-ask, and are deleted as part of account deletion (Section 7).

4. How trading credentials are protected

• Credentials are encrypted at rest using application-level encryption; decryption keys are restricted to the systems that perform copier configuration.
• Credentials are used only to set up, maintain, and remove your follower connections — never for trading decisions, marketing, or any other purpose.
• Access is limited to administrators performing the configuration you requested.
• You can remove saved credentials at any time in the dashboard, which deletes the encrypted record.

5. When we share information

We share personal information only with:

• Service providers that operate parts of the Service under contract: payment processing (Stripe), data hosting and storage (including Supabase), email delivery (Resend), SMS delivery (if you opt into text alerts), and the copier engine that executes your configured follower connections.
• Legal and safety recipients when required by law, subpoena, or to protect the rights, safety, or property of users or the company.
• Business transfers — if we are involved in a merger, acquisition, or asset sale, information may transfer subject to this policy.

6. Security

We use industry-standard safeguards: encryption in transit (TLS), encryption at rest for credentials, hashed passwords, role-restricted admin access, audit events for licensing and copier changes, and isolation of payment data with Stripe. No system is perfectly secure; you are responsible for keeping your login credentials confidential and for notifying us of suspected unauthorized access.

7. Retention and deletion

• Account and trading data are retained while your account is active and as needed for legal, billing, and audit purposes.
• You may request deletion of your account from the dashboard. Deletion is scheduled, and after the scheduled date your profile, KYC records, saved credentials, and personal data are removed; billing records required for tax and accounting are retained as required by law.
• Saved trading credentials are deleted immediately when you remove them.

8. Your rights and choices

• Access, correct, or update your profile information in the dashboard.
• Opt out of optional messaging (e.g. end-of-day SMS) at any time in preferences.
• Request a copy of, or deletion of, your personal data by contacting support. We will respond within the timeframes required by applicable law (e.g. GDPR, CCPA where applicable).
• Transactional emails required to operate your account (billing, security, verification) cannot be opted out of while your account is active.

9. Cookies and sessions

We use strictly necessary cookies for authentication sessions and security. We do not run third-party advertising trackers on the dashboard.

10. Children

The Service is for adults 18 and older. We do not knowingly collect information from minors; if we learn we have, we will delete it.

11. Changes to this policy

We may update this policy as the Service evolves. Material changes will be announced via the dashboard or email, and the effective date above will be updated. Continued use after changes take effect constitutes acceptance.

12. Contact

Privacy questions and data requests: contact support through the dashboard or the contact information listed on our site, referencing WDR Consulting, Inc..