Jastun (“we,” “us,” or “our”) is dedicated to safeguarding your personal data, execution telemetry, and digital privacy. This comprehensive Privacy Policy explains how we collect, store, process, and protect your information when you access our website (jastun.com), the Jastun Trading Academy, and our proprietary software solutions, including Anyted, Proppass, and Simark.
This Privacy Policy has been formulated to comply with global data governance mandates, including the European Union General Data Protection Regulation (GDPR – Regulation EU 2016/679), the California Consumer Privacy Act (CCPA/CPRA), and standard institutional cybersecurity benchmarks.
1. Categories of Information We Collect
A. Information You Voluntarily Provide
- Account Identification Data: Full name, corporate or personal email address, username, and encrypted account credentials when you register or initiate customer support transmissions.
- Customer Communications: Inquiries, technical bug reports, feedback transmissions, or partnership documentation submitted through our support portal or official email channels.
- Billing & Payment Information: Payment processing is handled entirely through certified, PCI-DSS compliant payment gateways (such as Stripe). Jastun never captures, accesses, or stores full payment card numbers or banking credentials on our servers.
B. Automated Execution & Analytics Telemetry
- Spotware cTrader Open API Telemetry: When utilizing Anyted, execution telemetry (such as order open/close timestamps, executed symbol, transaction volume/lot size, execution price, commission, swap, and realized profit/loss) is synchronized via official read-only OAuth 2.0 Open API protocols.
- Zero Custody Guarantee: We never ask for, capture, or store your master broker password, investor password, or direct terminal access credentials.
C. Device, Network & Technical Log Data
- Server Logs: Internet Protocol (IP) address, operating system, browser architecture, referring/exit pages, access timestamps, and telemetry error logs collected automatically to ensure system integrity and thwart DDoS attacks.
2. Lawful Basis and Purpose of Processing (GDPR Article 6)
We process personal and telemetry data under the following legitimate and contractual legal grounds:
- Contractual Performance: To provide you with automated trade journaling, risk guardian enforcement, and simulation services as agreed in our Terms of Service.
- Legitimate Interests: To improve algorithm efficiency, diagnose server latency, safeguard against unauthorized software tampering, and enhance user experience.
- Compliance with Legal Obligations: To adhere to financial reporting, tax documentation, and regulatory audit standards where applicable.
- Consent: Where you have provided express consent, such as opting into our educational research newsletter or permitting optional analytics cookies.
3. Third-Party Advertising, Google AdSense & Cookies Disclosures
To maintain open-access educational research within the Jastun Trading Academy, our website may display third-party advertisements served by Google AdSense and authorized digital advertising networks.
Important Google DoubleClick DART Cookie Notice:
- Google, as a third-party vendor, uses cookies to serve contextual and personalized ads on Jastun.
- Google’s use of the DART cookie enables it to serve targeted advertisements to users based on their visits to our website and other websites across the Internet.
- Users may opt out of personalized advertising by visiting the Google Ads Settings portal.
- Alternatively, you can opt out of a third-party vendor’s use of cookies for personalized advertising by visiting www.aboutads.info or the Network Advertising Initiative.
Cookie Management & Browser Controls
We utilize essential session cookies (required for login security and navigation) and performance cookies (to measure page load times). You have the complete right to accept, reject, or delete cookies at any time via your browser settings. However, disabling essential cookies may impair certain interactive features of our platform.
4. Data Sharing and Third-Party Disclosures
We do not sell, rent, monetize, or trade your personal or trade data to third-party data brokers under any circumstances.
Information is only shared under strictly controlled circumstances:
- Infrastructure Service Providers: Highly vetted cloud hosting providers (e.g., AWS, Cloudflare) operating under strict Data Processing Agreements (DPAs) requiring end-to-end data encryption.
- Legal & Regulatory Mandates: Where required by valid subpoenas, court orders, or applicable governmental laws to protect Jastun’s legal rights or prevent fraud.
5. Data Security & Storage Standards
We implement enterprise-grade technical and organizational safeguards:
- Encryption: All digital communications are encrypted in transit via Transport Layer Security (TLS 1.3). All database records are protected by AES-256 encryption at rest.
- Access Control: Strict role-based least-privilege access permissions, mandatory multi-factor authentication (MFA) for internal staff, and continuous security logging.
- Data Retention: We retain account telemetry only for as long as necessary to provide platform services or fulfill statutory tax and legal obligations. Upon account termination, personal data is permanently scrubbed from active databases within 30 days.
6. Your Data Protection Rights (GDPR & CCPA/CPRA)
Depending on your geographical jurisdiction, you possess explicit statutory data rights:
- Right of Access: You may request copies of the personal data we hold concerning your account.
- Right to Rectification: You may demand correction of inaccurate or incomplete records.
- Right to Erasure (“Right to Be Forgotten”): You may request the permanent deletion of your personal data.
- Right to Restrict Processing: You may request that we limit the processing of your data under specific conditions.
- Right to Data Portability: You may request your synchronized execution history in a machine-readable JSON or CSV format.
- Right to Object: You may object to data processing grounded in legitimate interests or direct marketing.
To exercise any of these rights, contact our Data Protection Officer directly at legal@jastun.com. We respond to all verified statutory requests within 30 calendar days.
7. Protection of Children’s Privacy (COPPA)
Jastun platforms, trading tools, and educational research are strictly intended for individuals aged 18 years or older. We do not knowingly solicit or collect information from minors. If we discover that personal data of a person under 18 has been submitted, we immediately terminate the account and purge the data.
8. Policy Updates and Inquiries
We reserve the right to periodically amend this Privacy Policy to reflect software feature releases or legislative developments. Material amendments will be prominently flagged on our homepage and via email notification to registered users.
For privacy questions, contact: Data Privacy Officer, Jastun • Email: legal@jastun.com.