CD-06 · reviewed 2 June 2026
Personal Data
An inventory of the personal data that reaches Algo Flexs through algoflexs.com, by the route it arrives on, with the purpose, the recipients and the retention period for each.
§1
Controller
§1.1
Algo Flexs, reachable at [email protected], decides what is collected on algoflexs.com and why. This document is the whole of that decision.
§2
Data, by the route it arrives on
§2.1
Four routes, and no fifth. Read a row across for what comes down that route and how long it survives.
§2.2
| route | what arrives | how long it is kept |
|---|---|---|
| processor | Whop's frame takes your name, your email address and your card details. Back to the desk come the email address, the name, the amount, the brand and last four digits of the card, a charge reference and the settlement time. | with the fill record, for the statutory accounting period after the fill — typically six years |
| execution ticket | The network address the ticket was opened from, stamped onto the fill record as delivery evidence and for fraud screening. | with the fill record, for the same accounting period |
| mailbox | Whatever you write to the desk, and the address it came from, held against the fill it concerns so a thread can be picked up where it stopped. | the licence term of that fill, then deleted unless a dispute is open |
| web server | Ordinary request logs: path, time, network address, browser identifier, referrer. Written automatically by the server, not by anyone at the desk. | rotated within thirty days |
scroll sideways for every column →
§2.3
Three notes on that grid. The full card number stays inside the processor's frame and is never transmitted to the desk. The address stamp on row two appears on the desk console and on no page a buyer can reach. Request logs are opened when something breaks or when the site is under attack, and at no other time.
§3
Data that never arrives
§3.1
The desk is not sent, and could not use, your broker account number, your terminal password, your balance, your open positions or your trading history. A build runs inside your terminal and opens no channel back to the desk.
§3.2
A minor's data does not belong here either: fills are open to adults only and the desk does not knowingly collect it. Tell the desk if that has happened and the record is deleted.
§4
Purposes
§4.1
Opening the gate for your archive, and holding that one address open for as long as the licence runs.
§4.2
Recognising your build when you write, and replying.
§4.3
Proving delivery if a charge is disputed, and screening for card fraud.
§4.4
Keeping the accounting records the desk is obliged to keep.
§4.5
Keeping the site running and detecting abuse of it.
§4.6
The desk sends no marketing, builds no profile of you, and neither sells nor trades personal data.
§5
Recipients
§5.1
Whop, as card processor: the payment itself, under Whop’s own privacy terms.
§5.2
The hosting provider whose server runs the site and stores the ledger database.
§5.3
The transactional email APIthat delivers the confirmation email and the desk’s replies.
§5.4
No provider on that list touches more than its own job needs. Outside those three, nothing about you is passed to anyone unless a court or a regulator compels it.
§6
Transfers and safeguards
§6.1
The providers in §5 may process data outside your country. Transport is encrypted, the ledger database is reachable only from the desk console behind its own credentials, and secrets are kept apart from the application code.
§6.2
No safeguard is absolute. Should a breach touch your data, the desk will tell you what was exposed and when, as soon as it knows.
§7
Cookies
§7.1
Listed in browser records (CD-07).
§8
Your entitlements
§8.1
Subject to your jurisdiction, you may ask what the desk holds on you, have it corrected, have it erased, have its use restricted, object to a use, or receive a copy in a portable format. Write to [email protected] from the address the fill was made with; no justification is required and the desk does not charge for it.
§8.2
A fill record that accounting law requires the desk to keep is exempt from erasure until the period in §2 has run. Erasure of the rest neither cancels nor prolongs a licence.
§8.3
Where you believe a request has been mishandled, you may complain to the data-protection authority for your country.
questions about this document: [email protected] · quote the clause number