1. Introduction

Merlin ("we", "our", or "us") operates the Merlin trading intelligence platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials through our OAuth provider. We do not store passwords directly.

2.2 Trading Data

You may upload trading data (CSV files, MT4/MT5 statements) to the Service. This data includes trade entries, exits, profit/loss figures, lot sizes, and timestamps. This data is stored securely and is only accessible to you and our analytics engine.

2.3 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, and session duration. This helps us improve the platform.

2.4 Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers, CVV codes, or full payment details. We only retain your Stripe customer ID for subscription management.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service
Generate trading analytics, behaviour insights, and performance reports
Process AI-powered analysis of your trading patterns
Process subscription payments and manage your account
Send you service-related communications (trial reminders, billing updates)
Improve and personalise your experience
Detect and prevent fraud or abuse

4. Data Storage and Security

Your data is stored on secure, encrypted servers. Trading data is isolated per user — no other user can access your trades, journal entries, or analytics. We use industry-standard encryption for data in transit (TLS/SSL) and at rest.

File uploads (CSV/HTML statements) are stored in Amazon S3 with access controls. We retain your data for as long as your account is active. Upon account deletion, all personal data and trading records are permanently removed within 30 days.

5. AI Processing

Merlin uses artificial intelligence to analyse your trading data and generate insights, behaviour flags, and performance recommendations. Your trading data may be processed by our AI models to provide these features. We do not use your individual trading data to train general-purpose AI models. AI analysis is performed on a per-user basis and results are only visible to you.

6. Third-Party Services

We integrate with the following third-party services:

Stripe — Payment processing and subscription management
Amazon S3 — Secure file storage for uploaded trading data
OAuth Provider — Authentication and identity verification

Each third-party service has its own privacy policy governing how they handle your data.

7. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share anonymised, aggregated data for analytics purposes (e.g., "average user win rate") that cannot be used to identify individual users. We may disclose your information if required by law or to protect our rights, safety, or property.

8. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Export your trading data at any time
Opt out of non-essential communications

To exercise any of these rights, please contact us at the email address below.

9. Cookies

We use essential cookies to maintain your session and authentication state. We do not use third-party tracking cookies for advertising purposes. Analytics cookies may be used to understand how the Service is used and to improve the user experience.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected], DM us on Instagram at @merlintradeio, or visit our Contact page.