Privacy Policy

Marco Brini, Ägydygasse 14, 8020 Graz, Austria ("Velquor", "we") is the controller responsible for processing your personal data under the EU General Data Protection Regulation (GDPR). Contact: support@velquor.app.

• Account data — email address, display name, avatar, and authentication data when you sign up (Art. 6(1)(b) GDPR — contract).
• Trading data — trades, positions, account balances, and journal entries you sync from MetaTrader 5 or enter manually. This is the core of the service (Art. 6(1)(b)).
• MT5 connection credentials — if you use Instant Connect, your MT5 account number, broker server and password. We ask for the read-only investor password, and for an account you add as a copy-trading follower, its trading password, because copying has to place trades. These are encrypted with AES-256-GCM and stored only on our own EU servers (Hetzner, Finland) — never in our main database (Art. 6(1)(b)).
• Portfolio data — holdings you add or import via CSV (Art. 6(1)(b)).
• Testimonials — only if you choose to write one: the quote, the name and description you enter, and when you agreed. It is published on velquor.app after review, and you can withdraw it at any time in Settings, which deletes it (Art. 6(1)(a) — consent; withdrawal does not affect publication before it).
• Technical data — IP address and request metadata in server logs, kept short-term for security and rate limiting (Art. 6(1)(f) — legitimate interest).

We do not collect advertising identifiers and we do not sell personal data.

When you use Velquor's AI features (chat, weekly review, trade feedback, Trader DNA), relevant excerpts of your trading data are sent to an AI provider to generate the analysis: Anthropic (Claude API) or Groq, depending on the feature and your plan. Both process this data as our processors, and Anthropic does not use API data to train its models. AI features run only when you invoke them.

• Vercel — application hosting and delivery.
• Supabase — database and authentication.
• Hetzner Online GmbH — sync bridge and cloud terminals (servers in Finland, EU).
• Anthropic — AI processing (see section 3).
• Groq — AI processing (see section 3).
• Resend — sending account email: sign-in codes, confirmation and password emails, and service messages.
• Cloudflare — DNS for velquor.app and network protection for the sync bridge your MetaTrader terminal connects to.
• Google — sign-in with Google, if you use it. The login page loads Google's sign-in script.
• Discord — only if you link your Discord account: your Discord user ID and username, used to give you your server roles.
• Stripe — payment processing when you buy a paid plan. Card details go to Stripe directly; we never see or store them.
• Telegram — internal operational and security alerts to the operator. An alert about your account can include your email address (Art. 6(1)(f) — legitimate interest in running the service securely).

Market prices (e.g. from Yahoo Finance and the European Central Bank) are fetched by our servers — your personal data is not shared with these sources.

Where a processor is located outside the EEA, transfers rely on EU Standard Contractual Clauses or an adequacy decision (e.g. the EU–US Data Privacy Framework) wherever the provider offers them.

Velquor uses only strictly necessary cookies: session cookies for login (Supabase Auth) and a preference entry storing your cookie choice. We run no advertising or tracking cookies. Embedded TradingView market widgets inside the dashboard are third-party content that sets its own cookies — they load only after you accept them, and you can withdraw that choice at any time via "Cookie settings" in the footer (Art. 7(3) GDPR). See TradingView's privacy policy for their processing.

Your data is kept for as long as your account exists. If you delete your account, or ask us to, your account and trading data are deleted. Disconnecting an Instant Connect terminal deletes the stored MT5 credentials. Server logs are rotated automatically.

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21). To exercise any of these, email support@velquor.app. You also have the right to lodge a complaint with a supervisory authority — in Austria, the Datenschutzbehörde (dsb.gv.at).

We may update this policy as the service evolves. Material changes will be announced in the app. The current version always lives at velquor.app/privacy.