Privacy Policy

Marco Brini, Ägydygasse 14, 8020 Graz, Austria ("Velquor", "we") is the controller responsible for processing your personal data under the EU General Data Protection Regulation (GDPR). Contact: support@velquor.app.

• Account data — email address, display name, avatar, and authentication data when you sign up (Art. 6(1)(b) GDPR — contract).
• Trading data — trades, positions, account balances, and journal entries you sync from MetaTrader 5 or enter manually. This is the core of the service (Art. 6(1)(b)).
• MT5 connection credentials — if you use Instant Connect, your MT5 account number, investor password, and broker server. These are encrypted with AES-256-GCM and stored only on our own EU servers (Hetzner, Finland) — never in our main database (Art. 6(1)(b)).
• Portfolio data — holdings you add or import via CSV (Art. 6(1)(b)).
• Technical data — IP address and request metadata in server logs, kept short-term for security and rate limiting (Art. 6(1)(f) — legitimate interest).

We do not collect advertising identifiers and we do not sell personal data.

When you use Velquor's AI features (chat, weekly review, trade feedback, Trader DNA), relevant excerpts of your trading data are sent to Anthropic (Claude API) to generate the analysis. Anthropic processes this data as our processor and does not use API data to train its models. AI features run only when you invoke them.

• Vercel — application hosting and delivery.
• Supabase — database and authentication.
• Hetzner Online GmbH — sync bridge and cloud terminals (servers in Finland, EU).
• Anthropic — AI processing (see section 3).

Market prices (e.g. from Yahoo Finance and the European Central Bank) are fetched by our servers — your personal data is not shared with these sources.

Where processors are located outside the EEA, transfers are safeguarded by EU Standard Contractual Clauses or an adequacy decision (e.g. the EU–US Data Privacy Framework).

Velquor uses only strictly necessary cookies: session cookies for login (Supabase Auth) and a preference entry storing your cookie choice. We run no advertising or tracking cookies. Embedded TradingView market widgets inside the dashboard are third-party content that sets its own cookies — they load only after you accept them, and you can withdraw that choice at any time via "Cookie settings" in the footer (Art. 7(3) GDPR). See TradingView's privacy policy for their processing.

Your data is kept for as long as your account exists. If you delete your account, or ask us to, your account and trading data are deleted. Disconnecting an Instant Connect terminal deletes the stored MT5 credentials. Server logs are rotated automatically.

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21). To exercise any of these, email support@velquor.app. You also have the right to lodge a complaint with a supervisory authority — in Austria, the Datenschutzbehörde (dsb.gv.at).

We may update this policy as the service evolves. Material changes will be announced in the app. The current version always lives at velquor.app/privacy.