Policies · updated 9 October 2026
Privacy policy
The controller of your personal data is CMM invest, registered office [to be completed: LAB_OPERATOR_ADDRESS], contact the contact form.
What we collect, why, and on what basis
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Email address | Your account and sign-in links; messages about your account | Contract | Until you delete the account |
| Name you choose for the community, and your messages | The community room | Contract | Until you delete them or the account |
| Rules you build and their test results | The fair tests | Contract | Until you delete the account |
| Alpaca paper API keys | Reading and trading your paper accounts | Contract | Encrypted; until you remove them or delete the account |
| Autopilot settings, orders and account figures read from Alpaca | Portfolios and autopilots | Contract | Until you delete the account |
| Subscription and payment status (from Stripe; we never see your card) | Billing | Contract; legal obligation | 10 years for accounting records |
| Technical logs (IP address, pages requested, errors) | Security and fixing faults | Legitimate interest | 12 months at most |
Who processes it for us
Hetzner Online GmbH (hosting, servers in the United States); Stripe (payments); Resend (sending sign-in emails); Alpaca Securities LLC (your paper accounts, under your own agreement with them). Data sent to the United States is protected by the European Commission's standard contractual clauses or the EU-US Data Privacy Framework, as each provider offers. We do not sell your data and do not use it for advertising profiles.
Cookies
We use one cookie, needed for you to stay signed in. It needs no consent. We do not use advertising or analytics cookies on the service. If that ever changes, we will ask for your consent first.
Your rights
You can access, correct, export and delete your data. Settings lets you download your data and delete your account yourself. For anything else write to us through the contact form. You can also object to processing based on legitimate interest, and complain to the CNIL (www.cnil.fr) or to the data protection authority where you live.
Questions about this page: the contact form. Version française.