Privacy Policy

1. Controller

Geofaith Capital Limited (Saint Lucia) is responsible for the personal data processed on the Gold AI Platform. Contact: [email protected].

2. Data we collect

• Account data: name, email, phone, country, password (stored only as a one-way hash), two-factor settings, language.
• Identity verification (KYC): copies of ID documents and a selfie you upload.
• Trading data: broker name, server and login of accounts you connect; the account password in encrypted form; balance, equity, positions and trade results; settlements and invoices.
• Partner data: referral relationships, commissions, payout details you provide (bank, mobile wallet or crypto address).
• Communications: support tickets, messages and notification history.
• Technical data: IP address, browser/device information, login sessions and a security audit log of important actions.

3. Why we use it

• To provide the service you signed up for (account, broker connection, automated trading, statements, invoices) — contract.
• To verify identity, prevent fraud and meet anti-money-laundering obligations — legal obligation and legitimate interest.
• To keep the Platform secure (audit logs, login protection) — legitimate interest.
• To send service emails (verification, security, invoices). Marketing emails only where permitted, with an unsubscribe link in every message.

4. How we protect it

Broker passwords are encrypted with AES-256 and can never be viewed by our staff. Staff access requires two-factor authentication and is limited by role; viewing KYC documents is logged. Data is stored on servers we control; access is restricted and monitored.

5. Sharing

We do not sell personal data. We share it only with service providers that help us run the Platform (hosting, email delivery, network/security providers), with your broker as needed to operate your account, with partners only to the extent of showing them their own referred clients' names and status, and with authorities where required by law.

6. International transfers

Our providers may process data outside your country. Where required we use appropriate safeguards for such transfers.

7. Retention

We keep account, KYC and financial records for as long as your account is active and afterwards for the period required by law or needed to resolve disputes (typically up to 5 years). Broker passwords are deleted when you remove the account. Security audit logs are kept for compliance and cannot be altered.

8. Your rights

Subject to applicable law you can ask to access, correct or delete your data, object to or restrict certain processing, and withdraw marketing consent at any time. Contact [email protected]. Some data must be retained for legal reasons even after a deletion request.

9. Cookies

We use only essential cookies needed to keep you signed in securely. We do not use advertising cookies.

10. Changes

We will publish updates on this page and, for significant changes, ask you to review them in the Platform.