Privacy notice
1. Who is responsible
Exodus 2.0 is the controller of your personal data. The client agreement you signed says who runs Exodus 2.0.
2. What we hold
- Your account here: your name, email and when you joined. Your password is stored only as a one-way hash, so we cannot read it.
- Your TradeQuo account: the MT5 login and server, and your MT5 trading password, stored encrypted (section 7).
- What your terminal reports: the holder's name at TradeQuo, currency and leverage, balance, equity and margin, open positions and trade history, your own trades included.
- Records we create: equity readings, daily results, statements and payments, and your account's history.
- Sign-in protection: after a failed sign-in, a one-way hash of the email and IP address used, to slow password guessing. Likewise a one-way hash of the IP address (and of the email or account concerned) for each sign-up, account connection and password reset request, so these cannot be made in bulk.
- Server logs: the IP address, page, time and browser of each request.
- Messages: anything you send us, such as a question or a complaint.
3. Where it comes from
From you, when you join and connect an account. From your MT5 terminal, while it is logged in to TradeQuo on our server. From your browser, when you use this website.
4. Why we use it
| Purpose | Lawful basis |
|---|---|
| Running your account and copying trades to it | Our contract with you |
| Issuing statements and recording payments | Our contract with you, and our legal duty to keep accounting records |
| Keeping the service and your account secure | Our legitimate interest in protecting members and the service |
| Answering questions and complaints | Our contract with you, and our legitimate interest in resolving problems |
| Meeting other legal duties | Legal obligation |
No advertising, no profiling, and we do not sell your data.
6. Data abroad
Some of the services above may handle data outside your country. Where the law requires safeguards for that, we rely on them.
7. How we protect it
This website is only reached over an encrypted connection. Your password here is stored as a one-way hash. Your MT5 trading password is encrypted the moment you submit it: the website cannot read it back, and only the separate part of our server that runs the terminals holds the key.
8. How long we keep it
- Your MT5 trading password: until you disconnect, when we delete it.
- Your terminal's files: at a disconnect we keep an archive of them (trade export, status reports and logs) with your account records, to answer questions about past statements.
- Account, trade and statement records: while you have an account, then as long as tax and accounting law requires and as long as we need them to deal with a claim. Then we delete them.
- Sign-in protection: up to 15 minutes after a failed sign-in, and up to an hour after a sign-up, account connection or password reset request.
- Server logs: 30 days, then deleted automatically.
- Database backups: 14 days on our server, then deleted automatically.
9. Your rights
You can ask for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a form you can take elsewhere. Some rights have limits: we must keep accounting records even if you ask us to delete them.
You can complain to the data protection regulator. In the UK this is the Information Commissioner's Office (ico.org.uk).
11. Changes
We update this notice when what we do with your data changes. The date at the top shows the current version.