Privacy Policy

01Who is responsible

TRUDO TECHNOLOGIES LTD, of 306 Victoria House, Victoria, Mahé, Seychelles, is the controller of the personal data described in this policy. Contact: sales@brokeros.tech.

02The two roles, kept apart

We act as controller for a small amount of data: the details of people who contact us, visit this website, or administer a customer account.

We act as processor for everything inside a customer's brokerage. That includes the personal data of the customer's own clients: identity documents, trading records, deposits, withdrawals, support conversations and correspondence. We process that only on the customer's documented instructions, and the customer is the controller of it. This policy does not govern that processing; the Data Processing Addendum does.

03What we collect as controller

Contact data you give us: name, business email, company, role, and anything you write in a message or a form on this site.

Account data for customer administrators: name, business email, role, and authentication metadata.

Technical data: IP address, browser and device type, pages requested and timestamps, collected in server logs for security and for keeping the service running.

We do not collect special category personal data through this website, and you should not send it to us through it.

04Why we use it, and on what basis

To answer enquiries and run a sales process, on the basis of our legitimate interest in responding to a business approach, or of steps taken at your request before entering a contract.

To provide and administer the Platform to a customer, on the basis of performance of a contract.

To keep the service secure, detect abuse and maintain records, on the basis of our legitimate interest in operating a secure service and of our legal obligations.

To send operational notices about the service. We do not run advertising or behavioural profiling, and we do not sell personal data to anyone.

05Cookies and analytics

This website is deliberately light on tracking. It sets no advertising cookies and runs no cross site tracking. See the Cookie Policy for what is set and why.

06Who we share it with

Infrastructure and hosting providers, security and monitoring providers, and communication tools, each acting under contract and only to the extent needed. The categories are listed in the Sub-processors page.

Professional advisers, and authorities where we are legally required to disclose. We do not share personal data for anyone else's marketing.

07International transfers

TRUDO TECHNOLOGIES LTD is incorporated in the Republic of Seychelles, which is not the subject of an adequacy decision under the UK or EU GDPR. Where personal data protected by those regimes is transferred to us or to a sub-processor outside the exporting jurisdiction, the transfer is made under Standard Contractual Clauses together with any supplementary measures the transfer risk assessment requires.

Customer Data residency is configurable per entity. Where a customer requires data to remain in a specific region, it is held in that region and the commitment is recorded in the order form.

08How long we keep it

Enquiry and sales correspondence: for as long as needed for the conversation, and for up to twenty four months afterwards unless you ask us to erase it sooner.

Customer account records: for the term of the subscription and for the period afterwards required for tax, accounting and limitation purposes.

Server and security logs: for a short rolling period, typically not exceeding twelve months.

09Security

Access to the Platform is on a read basis to customer systems, with writes limited to what the customer has approved. Access is least privilege, scoped and logged, entities are held apart, and every action carries the data it relied on at the time.

No system is perfectly secure. We will notify an affected customer without undue delay of a personal data breach affecting their data, with the information they need to meet their own notification obligations.

10Your rights

Where the UK or EU GDPR or a comparable regime applies, you may request access to your personal data, correction, erasure, restriction, portability, and you may object to processing carried out on the basis of legitimate interest. You may withdraw consent where consent is the basis.

Make a request to sales@brokeros.tech. We respond within one month, and will tell you if we need longer because the request is complex.

If you are the client of a brokerage that uses BrokerOS, your rights are exercised against that brokerage, which is the controller of your data. Send your request to them. If you send it to us, we will pass it on and support them in answering it, but we cannot answer it directly on their behalf.

You may complain to a supervisory authority in your country of residence or place of work.

11Changes

We may update this policy. The version in force is the one published here, last updated September 2026. Material changes affecting customers are notified by email.