Privacy Policy

Effective date: 29 August 2026 · Last updated: 29 August 2026

1. Who we are and what this policy covers

This Privacy Policy explains how Vector Traders LLC ("VectorTraders", "we", "us") collects, uses, shares and protects personal data when you visit vectortraders.com, create an account, or use our services (together, the "Services"). For the purposes of data-protection law, we are the data controller. Contact details are in Section 12.

By using the Services you acknowledge this policy. If you do not agree with it, please do not use the Services.

2. Information we collect

a) Information you give us

• Account data: name, email address, password (stored only in hashed form), country of residence, and communication preferences.
• Verification data: where required for compliance, identity documents, date of birth, proof of address, and the results of screening checks ("KYC/AML" data).
• Transaction data: wallet addresses you use to deposit or withdraw, deposit and withdrawal amounts and assets, transaction hashes, Fund Plan selections and account balances.
• Support data: messages, attachments and any information you share when you contact us.

b) Information we collect automatically

• Device and log data: IP address, browser type, operating system, device identifiers, referring URLs, pages viewed, timestamps and error logs.
• Usage data: how you navigate the Services, features used and interaction events.
• Cookies and similar technologies, described in Section 6.

c) Information from third parties

• Identity-verification and sanctions-screening providers.
• Blockchain analytics providers, and public blockchain data linked to wallet addresses you provide.
• Analytics and advertising partners, where applicable.

We do not knowingly collect special-category data (such as health or biometric data), except that an identity-verification provider may process a facial image comparison on our behalf where we ask you to complete a liveness check. We will obtain your consent where the law requires it.

3. How we use your information and our legal bases

Purpose	Examples	Legal basis (GDPR / UK GDPR)
Provide the Services	Create and manage your account, process deposits, allocate to Fund Plans, review and process withdrawals, show your dashboard	Performance of a contract
Compliance and safety	KYC/AML checks, sanctions screening, fraud prevention, responding to lawful requests, record-keeping	Legal obligation; legitimate interests
Security	Detecting abuse, unauthorised access and suspicious withdrawals	Legitimate interests
Communications	Service notices, security alerts, policy and terms updates, support replies	Contract; legitimate interests
Marketing	Newsletters and product updates, which you can opt out of at any time	Consent, or legitimate interests where the law allows
Improve the Services	Analytics, debugging, testing new features, performance reports	Legitimate interests; consent for non-essential cookies
Legal claims	Establishing, exercising or defending legal claims	Legitimate interests; legal obligation

We do not use your personal data for solely automated decisions that produce legal or similarly significant effects on you. Withdrawal requests are reviewed manually by our team.

4. How we share information

We do not sell your personal data. We share it only in these situations:

• Service providers that process data on our behalf under written contracts: hosting and infrastructure, identity verification, analytics, email delivery, customer-support tools and security services.
• Custody, exchange and trading counterparties, only to the extent needed to execute Fund Plan strategies and process transactions.
• Professional advisers, such as lawyers, auditors and insurers, under confidentiality obligations.
• Authorities and regulators, where we believe disclosure is required by law, legal process or a valid government request, or is needed to protect rights, safety or the integrity of the Services.
• Corporate transactions: if we are involved in a merger, acquisition, financing or sale of assets, personal data may be transferred, and we will notify you if your data becomes subject to a different privacy policy.
• With your consent or at your direction.

Blockchain transactions are public and permanent by design. Once a transaction is broadcast, we cannot erase or alter it, and information on the blockchain is not under our control.

5. International transfers

We and our service providers may process data in countries other than where you live, including countries whose data-protection laws differ from yours. Where we transfer personal data out of the UK or European Economic Area, we rely on an adequacy decision, Standard Contractual Clauses (with the UK addendum where relevant), or another lawful transfer mechanism, and we apply supplementary safeguards where needed.

6. Cookies and similar technologies

We use cookies and similar technologies for these purposes:

Category	Purpose	Consent needed
Strictly necessary	Log-in sessions, security, load balancing, remembering your cookie choices	No
Functional	Language, display and dashboard preferences	Yes, where required by law
Analytics	Understanding how the Services are used so we can improve them	Yes, where required by law
Marketing	Measuring campaigns and, if enabled, showing relevant content	Yes

You can manage non-essential cookies through our cookie banner or your browser settings. Blocking some cookies may affect how the Services work. Where we detect a "Global Privacy Control" signal, we treat it as an opt-out of sale or sharing where the law requires.

7. Data retention

We keep personal data only as long as needed for the purposes in this policy. As a rule:

• Account and transaction records are kept while your account is active and for 5–7 years after closure, to meet financial-record, tax and anti-money-laundering obligations.
• Verification records are kept for the period required by applicable AML law, generally 5 years after the relationship ends.
• Support correspondence is kept for 2–3 years.
• Marketing data is kept until you unsubscribe or withdraw consent.
• Log and analytics data is kept for 12–26 months, then deleted or anonymised.

Where a legal hold or dispute applies, we keep the relevant data until it is resolved.

8. Security

We use administrative, technical and organisational measures designed to protect personal data, including encryption in transit, access controls, multi-factor authentication for staff, monitoring, and manual review of withdrawal requests. No system is completely secure, and we cannot guarantee absolute security. You are responsible for choosing a strong password, protecting your credentials and devices, and giving us correct withdrawal wallet addresses. Please tell us immediately at the security contact in Section 12 if you suspect unauthorised access.

9. Your rights

Depending on where you live, you may have the following rights over your personal data:

• Access a copy of the data we hold about you.
• Correction of inaccurate or incomplete data.
• Deletion, subject to legal retention duties (for example, AML record-keeping).
• Restriction or objection to certain processing, including direct marketing at any time.
• Portability of data you gave us in a structured, machine-readable format.
• Withdraw consent where processing relies on consent, without affecting earlier lawful processing.
• Complain to your local data-protection authority.

Additional information for California residents. In the preceding 12 months we have collected the categories of personal information listed in Section 2, for the business purposes in Section 3. We do not sell personal information or share it for cross-context behavioural advertising. California residents may request to know, delete, correct and limit use of sensitive personal information, and will not receive discriminatory treatment for exercising these rights.

To exercise any right, email [email protected]. We may need to verify your identity first, and we will respond within the time required by law (generally one month under GDPR and 45 days under CCPA). Some requests can be declined where an exemption applies, for example where deleting data would breach our legal obligations.

10. Children

The Services are for adults only and are not directed at anyone under 18 (or the age of majority where you live, if higher). We do not knowingly collect data from minors. If we learn that we have, we will delete it and close the account.

11. Changes to this policy

We may update this policy from time to time. We will post the new version with a revised "Last updated" date and, for material changes, notify you by email or a prominent notice on the Services before the change takes effect. Continued use after the effective date means you accept the updated policy.

12. Contact us

Vector Traders LLC, 6635 S DAYTON ST STE 310 UNIT 226
GREENWOOD VILLAGE CO 80111

Support enquiries: [email protected] · Security reports: [email protected]