Calculated Trading ({{Legal entity name}}) is the data controller for this website and its services. Our registered address is {{Street, postal code, city, Netherlands}}. You can contact us at all times at info@calculatedtrading.com.
We process the following personal data. The list reflects what our product actually stores today; we never collect data we do not need.
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
| Email address | Account login, activation, password reset, order notifications | Contract / consent | While your account exists |
| Password (hashed) | Secure authentication | Contract | While your account exists |
| Exchange API keys (encrypted) | Placing and managing your orders through the premium dashboard | Contract | Until you delete them |
| Stripe customer & subscription identifiers | Managing your premium subscription | Contract | While needed for billing |
| Analytics identifiers (cookie-less hashes) | Aggregated visitor analytics | Legitimate interest | See section 6 |
Card details are processed exclusively by our payment provider Stripe and are never stored on or transmitted to our servers.
Your exchange API keys are encrypted at rest using AES-256 with a key held only by our backend. They are never displayed back to you and are decrypted only in memory when needed to sign a request. The platform requests read and trading permissions only and can never move funds off your exchange account. We recommend disabling withdrawal permissions on the exchange side as a best practice.
We set a single strictly necessary cookie and use local storage required for the application to function. We do not use advertising, social or third-party tracking cookies (see our Cookie Policy for full details).
We share data only with the processors required to deliver the service: Stripe (payment processing, refunds and subscription management) and the exchanges you connect (to place and manage orders on your behalf). We never sell your personal data. Stripe may transfer data to the United States under the European Commission's standard contractual clauses, which provide an equivalent level of protection to the GDPR.
Account data is kept for as long as your account exists. Analytics hashes are stored in aggregated form and are not used to identify individual visitors. You can request deletion of your account and its data at any time by contacting us, and we will remove or anonymise whatever we hold, except where we are legally required or justified to keep records (for example for billing and tax purposes).
Depending on your jurisdiction (in particular the GDPR and CCPA), you may have the right to:
To exercise any of these rights, email info@calculatedtrading.com. You also have the right to lodge a complaint with your national supervisory authority (in the Netherlands, the Autoriteit Persoonsgegevens). Email-only reminder: no financial or personal information is ever sent unencrypted.
We encrypt API keys at rest, hash passwords, serve the site exclusively over HTTPS, and set hardened session cookie flags (Secure, HttpOnly, SameSite). These measures are designed to protect your personal data against unauthorised access, alteration or loss.
We may update this policy from time to time. The current version is dated {{Date of last update, e.g. 20 August 2026}} and any changes will be posted on this page.
Questions about this policy or your data? Contact us at info@calculatedtrading.com.