Privacy policy
What data we process, why, and with what safeguards.
Last updated: August 5, 2026
1. Who is responsible and scope
This policy describes what personal data baaltrade processes when you visit the site, create an account or take part in the program, and with what safeguards. The current version is always the one published on this page.
2. Data we process
Account data (email and name), your trading activity on evaluation and funded accounts, and technical security data: the IP address and timestamp of every login, kept as an audit record. Payments are processed by our provider: your card details never touch our servers. To settle withdrawals we may ask for the identity verification (KYC) that regulation requires.
3. What we use it for
To operate the service: assess your progress, enforce the risk rules, provision your trading account and settle withdrawals. To prevent fraud, including the behavioral analytics that watch Phase 2 — its signals are always reviewed by a person before any decision about your account. And to send you the service's transactional emails. We do not sell your data or use it for advertising.
4. Who we share it with
Only with the providers essential to run the service, and only what is necessary: the payment processor, the market-infrastructure provider where your trading account is created, and the transactional email provider. Beyond that, only where a legal obligation requires it.
5. Cookies and sessions
We use a session cookie (HttpOnly, Secure) to keep you signed in and a language-preference cookie. We do not use third-party advertising trackers.
6. How we protect it
Robust password hashing, server-side revocable sessions, optional two-step verification with anti-replay protection, trading credentials encrypted at rest and encryption in transit across the platform.
7. How long we keep it
For as long as your account is active. If you delete it, we keep only what accounting and fraud-prevention obligations require, and only for the legally mandated periods.
8. Your rights
You can request access, rectification, deletion or portability of your data by writing to support from your dashboard. We handle every request within the timeframes set by applicable regulation.
9. Minors
The service is intended exclusively for adults aged 18 or over. We do not knowingly process minors' data; if we detect a minor's account, we will delete it.
10. Changes to this policy
We will publish any change here, updating the revision date. If a change materially affects how we process your data, we will notify you.
11. Contact
For any privacy questions or to exercise your rights, write to us from your dashboard or on the Support page.