Privacy Policy

We collect only the information required to secure access, operate the platform, and honor legal obligations.

• Controller: tacticx Development GmbH, Geldern, Germany
• Primary data residency: Frankfurt (DE)
• Privacy contact: [email protected]

tacticx Development GmbH (“we”, “us”, or “our”) operates the Algovex platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Our practices align with the GDPR and the German Federal Data Protection Act (BDSG).

tacticx Development GmbH

Walbecker Str. 53, 47608 Geldern, Germany

Email: [email protected]

• Strategy logic is stored in a compiled, structured form and protected with strict access controls; we do not publish or share your strategy source.
• Execution environments are isolated with strict access controls to protect intellectual property.
• Broker API keys are stored encrypted and managed with role-based access controls.

• Account data such as email address, name, and billing details (processed via Stripe).
• Usage telemetry for security monitoring, fraud prevention, and service optimization.
• Session identifiers required to keep your account authenticated.

• Maintain secure access to the compiler, editor, and marketplace.
• Operate billing, compliance, and audit obligations.
• Improve stability, latency, and infrastructure reliability.

• Providing the platform, your account and support: performance of a contract (Art. 6(1)(b)).
• Billing, invoicing, tax and bookkeeping: legal obligation (Art. 6(1)(c)) and contract (Art. 6(1)(b)).
• Security, fraud prevention, abuse protection and service improvement: our legitimate interests (Art. 6(1)(f)).
• Cookies/analytics and any marketing email: your consent (Art. 6(1)(a)), which you can withdraw at any time.

If you join the pre-launch waitlist, we process the data you provide to manage the list and to notify you when early access opens:

• What we collect: your email address, the page you signed up from, your language, a technical record (IP address and user agent) captured for spam protection and as consent evidence, your optional answers to a few product questions, and — if a referral link was used — the referral code that invited you and the code assigned to you.
• Double opt-in: we send a confirmation email and only keep you as a confirmed signup once you click the link. Until then, no marketing is sent.
• Purpose & legal basis: operating the waitlist and sending you the one-off launch notification rests on your consent (Art. 6(1)(a) GDPR). If you additionally opt in to product updates and news, that separate consent (also Art. 6(1)(a)) covers those emails. Either can be withdrawn at any time.
• Referrals: sharing your referral link is voluntary. We count how many invitees confirmed their email so we can rank inviters (for example for a launch reward). We do not receive contact details of people you invite unless they choose to sign up themselves.
• Retention: we keep waitlist data until launch and for a short period afterwards to send the invitation, then delete it. Consent records are kept as evidence for the applicable limitation period.
• Remove yourself / withdraw consent: use “Remove me from the waitlist” in the waitlist window, the unsubscribe link in any email we send, or contact us via the imprint. Removal deletes your waitlist record.

We share personal data only with service providers acting on our behalf under Art. 28 data-processing agreements, including:

• Stripe: payments & billing
• Resend: transactional email
• Our hosting, database & object-storage provider (EU)
• Error-monitoring (when enabled) for stability and security
• A content-delivery network for performance and abuse protection
• Market-data providers (e.g. FRED, CoinGecko, Coinalyze, HistData) where their data powers a feature

We do not sell your personal data.

Some processors (for example Stripe and Resend) may process data outside the EU/EEA, including in the United States. Such transfers are safeguarded by the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework. A copy of the relevant safeguards is available on request.

• Account data: for the life of your account, then deleted (subject to the periods below).
• Invoices, payment and tax records: retained for 10 years (German § 147 AO / § 257 HGB).
• Consent and withdrawal-waiver records: kept as evidence for the applicable limitation period.
• Security and access logs: kept for a limited period for security monitoring, then deleted.

• Access: Right to receive a copy of your personal data.
• Rectification: Right to correct inaccurate information.
• Erasure: Right to be forgotten and data deletion.
• Portability: Right to transfer data to another provider.
• Restriction: Right to limit how we process your data.
• Objection: Right to object to marketing processing.

You can export your data and request deletion directly from your account settings (Data export and Delete account), or contact [email protected]. We respond within the statutory time limits.

You have the right to lodge a complaint with a data-protection supervisory authority (Art. 77 GDPR). Our lead authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW). You may also contact the authority in your country of residence.

We implement technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Access logs are retained for compliance and security monitoring and are deleted according to retention schedules.

Primary infrastructure and backups remain within EU jurisdictions under Standard Contractual Clauses when required.