Privacy & Data Governance

Privacy Policy

Last updated: 14 January 2026

1. Overview and Data Controller

Ravensorq ("we", "us", or "our") is dedicated to protecting the privacy, confidentiality, and integrity of your personal information. This Privacy Policy details our practices concerning the collection, storage, use, and disclosure of personal data gathered when you visit or interact with our web-based platform.

For individuals residing in the United Kingdom and the European Economic Area, Ravensorq acts as the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Categories of Data We Collect

We collect and process personal data strictly in connection with providing, securing, and refining our analytical software services. These categories include:

  • Identity and Contact Data: Full name, verified email address, telephone contact details, and account profile identifiers provided during account registration or inquiry submission.
  • Technical and System Identifiers: Internet Protocol (IP) addresses, browser type, operating system version, browser locale, device telemetry, and hardware fingerprints.
  • Usage and Interaction Records: Navigation path metrics, algorithmic parameters viewed, module latency diagnostics, session duration, and feature utilization.
  • Financial Configuration Details: Preferred market instruments (e.g., BTC/USDT, ETH/USD), automated strategy risk thresholds, and transaction history generated within the software interface (excluding full raw banking or card numbers).

3. Legal Grounds for Processing

In accordance with statutory data protection frameworks, we process your personal data under the following legal bases:

  • Contractual Performance: Necessary to register your account, maintain software access, and deliver automated market telemetry requested by you.
  • Legitimate Interests: Necessary to prevent platform abuse, combat cyber threats, monitor computational cluster stability, and optimize algorithmic delivery models.
  • Legal and Regulatory Compliance: Retaining necessary transaction documentation to satisfy legal accounting, regulatory, and anti-financial-crime mandates.
  • Explicit Consent: Where you have agreed to non-essential analytical cookies or direct promotional communications.

4. Cookies and Session Analytics

We use essential cookies and session storage items to sustain your authentication states, safeguard user sessions against cross-site request forgery, and store preferred platform configurations. With your consent, we may also utilize aggregated analytical tags to understand system throughput and interface bottlenecks. You can manage or disable cookie preferences at any time via your browser settings.

5. Disclosure and Third-Party Processors

Ravensorq does not sell, rent, or trade your personal data to external advertisers. We only disclose personal information to vetted service providers bound by strict confidentiality and data protection obligations, including:

  • Cloud hosting, computational node providers, and server infrastructure operators located in secure data centers.
  • Cybersecurity vendors and DDoS mitigation networks assisting in platform protection.
  • Statutory bodies, regulators, or law enforcement authorities when mandatory by court order or applicable UK statute.

6. Cross-Border Data Transfers

Where personal information is transferred outside the United Kingdom or the European Economic Area to maintain worldwide cloud redundancy, Ravensorq ensures that appropriate safeguards are implemented. These include the UK International Data Transfer Addendum or standard contractual clauses recognized under relevant data protection laws, guaranteeing an equivalent standard of protection.

7. Data Retention and Security Measures

We maintain comprehensive technical and organizational controls to protect personal data against accidental loss, unauthorized access, alteration, or disclosure. These measures encompass TLS 1.3 cryptographic transport, end-to-end database encryption at rest, role-based access limits, and regular vulnerability audits.

Your information is retained only for the duration necessary to satisfy the purposes set out in this Policy or to comply with statutory accounting and regulatory obligations, after which it is securely anonymised or irreversibly destroyed.

8. Your Statutory Rights

Under the UK GDPR and equivalent data protection legislation, you are entitled to exercise several fundamental rights regarding your personal information:

  • Right of Access: Request a confirmation and copy of all personal data held about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal records.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of personal records where there is no lawful justification for their continued processing.
  • Right to Restriction: Request the temporary suspension of data processing under certain statutory circumstances.
  • Right to Data Portability: Obtain a structured, machine-readable export of data you previously provided to us.
  • Right to Object: Contest our processing based on legitimate interests or direct marketing initiatives.

9. Supervisory Authority & Contact Information

If you wish to exercise any of your statutory rights, or if you have questions regarding our privacy framework, please reach out to our appointed Data Protection Officer at [email protected].

You also retain the right to submit a complaint directly to the UK supervisory authority, the Information Commissioner's Office (ICO), via their official website at ico.org.uk.