CURRENT DOCUMENT
Privacy Policy
How GoldenHODL collects, uses, shares, and protects personal information.
Last updated and official contact
September 8, 2026. Legal entity: GoldenHODL legal entity not configured. Official address: Official physical address not configured. Contact: info@goldenhodl.com. Phone: Not configured.
1. General Provisions
This Privacy Policy explains how GoldenHODL collects, uses, stores, and protects personal information. The platform integrates with MetaTrader 5, MetaApi Cloud, and digital payment systems and follows applicable data protection standards.
2. Information We Collect
Registration information: full name, email, phone number, and residential country or address.
Financial and trading information: selected portfolio, account balance, MT5 account number, and server-related technical information.
Technical and access information: IP address, browser type, operating system, platform usage history, and cookie information.
3. Purpose of Using Information
Information is used to provide Copy Trading and EA Rental services, confirm orders, implement portfolio and contract terms, calculate fees, process payments through Lemon Squeezy, prevent fraud, meet KYC/AML requirements, and send service or technical notices.
3A. What Information Do We Retain and For How Long?
We do not retain all information for the same period. We collect and retain only the information needed for the stated service, security, verification, and legal purposes below. Active account information is retained for the duration of the service relationship. Financial transaction history may be archived for up to 5 years for legal and tax reporting requirements. IP addresses, security logs, cookies, and technical usage data are automatically deleted after 90 days unless a shorter consent period applies.
| Data Field | Necessity | Legal Basis | Retention Period |
|---|---|---|---|
| Full name | Identify the user and enter into a contract | Performance of a contract | Active account duration plus 1 year |
| Email address | Service notifications and verification | Performance of a contract | Active account duration plus 1 year |
| Phone number | Two-factor authentication and urgent contact | Security and fraud prevention | Active account duration |
| Active account and service data | Provide the selected service and maintain the account | Performance of a contract | For the duration of the active service relationship |
| Financial transaction history | Payment reconciliation, tax reporting, and legal recordkeeping | Legal obligation | Up to 5 years after the transaction or as otherwise required by law |
| IP address and security logs | System security, fraud prevention, and incident investigation | Legitimate interest | 90 days, then automatically deleted |
| Cookies and technical usage data | Security, preferences, and consent management | Consent for optional cookies; legitimate interest for essential security | 90 days, then automatically deleted unless a shorter consent period applies |
4. Third-Party Data Transfers
We do not sell personal information. We disclose personal information only to the named providers below when necessary to perform the service, protect security, process a payment, or comply with a legal obligation. Each provider may process the information only for the documented service purpose and may not reuse it for an unrelated purpose under our instructions and applicable data-processing terms.
| Provider | Purpose | Data shared | Legal basis and restriction |
|---|---|---|---|
| Supabase | Database storage, authentication, profile management, and RLS-protected account services | Account identifier, email, profile fields, consent and request records | Performance of contract and security; processor may not use the data for unrelated purposes |
| Vercel (application hosting) | Run the web application and server-side API requests | Request metadata, IP address, and data required to serve authenticated requests | Performance of contract and legitimate security interest; limited to hosting and security operations |
| MetaApi Cloud | Connect to and retrieve authorized MetaTrader trading account data | Trading account identifier, positions, orders, deals, and technical connection data | Performance of contract and security; limited to the requested trading integration |
| Lemon Squeezy | Payment checkout, transaction confirmation, fraud prevention, and billing support | Email, order details, amount, currency, and checkout metadata; card data is handled by the provider | Performance of contract and legal/payment obligations; payment data is not used by GoldenHODL for unrelated purposes |
4A. International Transfers
Service providers may process information in countries outside your residence. We use contractual, technical, and organizational safeguards appropriate to the transfer and disclose a provider when required by applicable law.
4B. Data Storage Locations and Transfer Safeguards
The declared primary database provider is Supabase, with the project region configured as: Not configured. Application hosting is configured for: Not configured. Payment processing is provided by Lemon Squeezy; payment card details are not stored by GoldenHODL. Cross-border transfers use: Not configured. The declared technical and organizational security standards are: Not configured. These locations and safeguards must be verified against the provider contracts and deployment console before production processing begins.
5. Security and Your Rights
We use SSL encryption, secure server-to-server API connections, and access restrictions. Internet transmission cannot be guaranteed to be completely secure.
You may access, correct, or request deletion of your information, subject to legal and financial recordkeeping obligations, and opt out of marketing communications.
5A. Requests and Children
Send an access, correction, erasure, or machine-readable portability request to info@goldenhodl.com or through the account request channel. We may verify your identity before acting and respond within the period required by applicable law. GoldenHODL is an adult-only financial trading service. Users must be at least 18 years old, provide a valid date of birth, and pass age verification before registration can continue. We do not knowingly accept accounts from minors, so a parental-consent workflow is not used for this service.
5B. Inactive Accounts and Erasure Requests
When an account becomes inactive, we restrict processing and begin the applicable retention period shown in the matrix. After the retention period expires, personal information is deleted or irreversibly anonymized within 30 days, unless it must be retained for tax, anti-money laundering, payment, fraud prevention, legal claims, or other legal obligations. When you submit a verified erasure request, we delete or anonymize eligible information within 7 business days of verification and explain any information that must be archived or retained.
6. Changes and Contact
Updates take effect when posted on this page. Questions can be sent to info@goldenhodl.com.