Privacy.
We collect what the service needs — account details, broker tokens (encrypted), trade outcomes — and nothing else. No ad trackers, no data sales, ever.
Who we are, and how to reach us
daskapital is the controller of the personal data described here. Write to privacy@daskapital.xyz for anything on this page — access, correction, erasure, a copy of your data, or an objection. We answer within one month, which is the statutory deadline, and usually sooner. Our servers are in London.
What we collect
Your email address, the country you gave at signup, your language and security settings, and a password hash or passkey. Your bots and their configuration. Encrypted broker tokens. Your trade and activity history. Billing records from Stripe. Support messages you send us. Blog comments you post. Push tokens for devices you asked to be notified on. Standard security logs.
What we never collect
Broker passwords, withdrawal credentials, or anything that would let us move your funds — the authorisation you grant is trade-only, and the permission to withdraw is not part of it. We run no advertising trackers on any surface, and we never sell or share data for advertising.
Why we use it, and on what legal basis
Running your bots, taking payment and answering support are performance of our contract with you. Keeping the service secure, preventing abuse and improving reliability are our legitimate interests, and you can object to those at any time. Marketing email is consent, given by ticking a box that is never pre-ticked, and withdrawable from any message we send. Keeping billing records is a legal obligation.
Cookies
Three, and only one of them asks. The session and theme cookies are strictly necessary — one signs you in, the other remembers a setting you chose — so they are set without consent, as the rules allow. The referral cookie is attribution, which is not necessary for anything you asked for, so nothing is written until you accept the banner. You can change your answer at any time, and refusing is remembered exactly as long as accepting. Our page-speed and traffic measurement is cookieless and stores nothing on your device.
| Cookie | What it does | How long |
|---|---|---|
| session | Keeps you signed in | Until you sign out |
| dk_theme | Remembers light or dark | 1 year |
| dk_consent | Remembers your answer to this banner | 6 months |
| dk_ref | Credits a referral — needs your consent | 30 days |
How long we keep it
Only as long as each thing is needed for. When you delete your account everything below is erased after the grace period, except the billing records, which are kept because tax law requires it — unlinked from you, so nothing in our database ties them to a person.
| What | Kept for | Why |
|---|---|---|
| Account and bots | Until you delete, then 30 days | Running the service |
| Trade history | Newest 500 per account | Showing you your own record |
| Activity and notifications | Capped per account, oldest dropped | Showing you what happened |
| Support messages | Until you delete your account | Continuity of a conversation |
| Billing records | 6 years, unlinked after deletion | Legal obligation (tax) |
| Server logs | A short rolling window, not archived | Running and debugging the service |
| Error reports | Up to 90 days | Fixing faults — stripped of IP and identity |
| Marketing consent | Until you unsubscribe | Proving the consent was given |
Who else sees it
Processors only, each under a contract that binds them to our instructions: Stripe for payments, our hosting and error-monitoring providers, an email provider for the messages you asked for, and your own broker via its API. Never sold, never shared for advertising, never handed to anyone for their own purposes.
Where your data is
Our servers are in London. Some processors are in the United States, so some data is transferred there — those transfers rely on the UK and EU adequacy decisions for the US Data Privacy Framework where the provider is certified, and on standard contractual clauses where it is not. You can ask us which applies to a particular provider.
Your rights
You can get a copy of everything we hold about you (Account → Export data, which downloads it immediately), correct anything wrong, delete your account (Account → Delete account: your bots stop at once, open positions are left to close on their own stops, and everything is erased 30 days later unless you cancel), restrict or object to processing, and withdraw any consent you have given. Ask at privacy@daskapital.xyz and we will do it without charge.
Automated decisions
The bot places and closes trades automatically — that is the product, and it acts inside the limits you set. It makes no decision about you: nothing here profiles you, scores you, or decides whether you may use the service.
Complaints
If you think we have handled your data badly, tell us first at privacy@daskapital.xyz. You also have the right to complain to a supervisory authority at any time — in the UK that is the Information Commissioner’s Office at ico.org.uk, and in the EU it is the authority where you live or work.